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TECHNICAL REPORT 




The 

RICIS 

Concept 


The University of Houston-Clear Lake established the Research Institute for 
Computing and Information systems in 1986 to encourage NASA Johnson Space 
Center and local industry to actively support research in the computing and 
information sciences. As part of this endeavor, UH-Clear Lake proposed a 
partnership with JSC to jointly define and manage an integrated program of research 
in advanced data processing technology needed for JSC’s main missions, including 
administrative, engineering and science responsibilities. JSC agreed and entered into 
a three-year cooperative agreement with UH-Clear Lake beginning in May, 1 986, to 
jointly plan and execute such research through RICIS. Additionally, under 
Cooperative Agreement NCC 9-16, computing and educational facilities are shared 
by the t wo institutions to condu ct the research. r_-: ; • 

The mission of RICIS is to conduct, coordinate and disseminate research on 
computing and information systems among researchers, sponsors and users from 
UH-Clear Lake, NASA/JSC, and other research organizations. Within UH-Clear 
Lake, the mission is being implemented through interdisciplinary involvement of 
faculty and students from each of the four schools: Business, Education, Human 
Sciences and Humanities, and Natural and Applied Sciences. 

Other research organizations are involved via the “gateway” concept. UH-Clear 
Lake establishes relationships with other universities and research organizations, 
having common research interests, to provide additional sources of expertise to 
conduct needed research. 

A major role of RICIS is to find the best match of sponsors, researchers and 
research objectives to advance knowledge in the computing and information 
sciences. Working jointly with NASA/JSC, RICIS advises on research needs, 
recommends principals for conducting the research, provides technical and 
administrative support to coordinate the research, and integrates technical results 
into the cooperative goals of UH-Clear Lake and NASA/JSC, 
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Preface 


This research was conducted under auspices of the Research Institute for 
Computing and Information Systems by Dr. Rodney L. Bown, Associate Professor of 
Computer Systems Design at the University of Houston-Clear Lake. Dr. Bown also 
served as RICIS research coordinator. 

Funding has been provided by the Engineering Directorate, NASA/JSC through 
Cooperative Agreement NCC 9-16 between NASA Johnson Space Center and the 
University of Houston-Clear Lake. The NASA technical monitor for this activity was 
William C. Young, of the Project Integration Office, Flight Data Systems Division, 
Engineering Directorate, NASA/JSC. 

The views and conclusions contained in this report are those of the author and 
should not be interpreted as representative of the official policies, either express or 
implied, of NASA or the United States Government. 
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Bibliography for Computer 
Security, Integrity, and Safety 


1. introduction 

Several years ago this bibliography on computer security 
integrity and safety issues was started to provide support for 
the computer science program at the university. In the last two 
years, the bibliography has been updated and expanded in support 
of RICIS task SE. 26. The size and variety of the bibliography 
should provide the reader with a perspective on the volume of 
recent activities within the technical, business, and government 
communities. This bibliography is divided into the following 
sections: 

Recent National Publications 
Books 

Journal/Magazine Articles, and Miscellaneous Reports 
Conferences, Proceedings and Tutorials 
Government Documents and contractor Reports 

The bibliography is followed by an unstructured list of citations 
on computer viruses, worms, trojan horses, and hackers. 

All documents are available at the university or through 
inter library loans. 
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2 . Recent National Publications 


This section provides a list of recent publications that 
highlight issues with respect to computer security, integrity and 
safety. 

Proceedings from the 1990 Workshop on Issues of Integrity and 
Security in an Ada Environment . 3-5 April. Orlando, 

Florida. Sponsored by IIT Research Institute and Ada Joint 
Program Office. Published in Ada Letters November/december 
1990 88-121. ... ... 


Clark, David, editor. Computers at Risk . Washington: National 

Academy Press, 1990 - - - 

Denning, Peter J., Computers Under Attack . New York: ACM Press 
(published by Addison Wesley) 1990. 

Diller, Antoni. Z - An Introduction to Formal Methods . New 
York: John Wiley, 1990. 

Forester, Tom and Morrison, Perry. Computer Ethics . Cambridge, 
Massachusetts: The MIT Press, 1990. 

Hoffman, Lance J. Rouge Programs: Viruses, Worms, and Jr oi an 

Horses . New York: Van Nostrand Reinhold, 1990 


Luckman, David. Programming with Specification, An Introduction 
to A NNA, a Language for Specifying Ada Programs . New York: 
Springer-Verlag, 1990. 

Pfleeger, Charles P. Security In Computing . Englewood Cliffs, 
New Jersey: Prentice Hall, 1989. 

Pyle, I. C. Developing Safety Systems . Hertfordshire U.K.: 
Prentice Hall International, 1991. 

Sennett, C.T. (Editor). High Integrity Software . New York: 
Plenum Press, 1989. 
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3 . BOO]C3 

anon. Computer Data Security . Washington: Bureau of National 

Affairs Inc., 1989. 

anon. Security for VAX Systems . Digital Equipment Corporation. 
1989. 

Babich, Wayne A. Software Configuration Management . Reading: 
Addison-Wesley 1986. 

Burger, Ralf. Computer Viruses - a high tech disease . Grand 
Rapids: Abacus, 1988. 

Cary, John M. Data Security And Performance Overhead in a 

Distributed Architecture System . Ann Arbor, Michigan: UMI 

Research Press, 1981. 

Christofferson, P., et.al. Crypto User 1 Handbook, A guide for 
implementors of Cryptographic Protection in Co mputer 
Systems . North Holland: Elsevier Science Publishing 

Company, Inc. IFIP, 1988. 

Chor, BenJZion. Two Issues in Public Key Cryptography RSA Bit 

Security and a New Knapsack Type System . London: MIT Press, 
1985. 

Clark, David, editor. Computers at Risk . Washington: National 

Academy Press, 1990 

Cooper, James A. Computer & Communication Security . New York: 
McGraw-Hill Book Company, 1989. 

Davies, D.W. and W.L. Price. Security for Compu ter Networks. 

New York: John Wiley & Sons, 1984. 

Davies, D.W. and W.L. Price. Security for Computer Networks 
Second Edition . New York: John Wiley & Sons, 1989. 

Denning, Dorothy. Cryptography and Data Security . Reading: 
Addison-Wesley, 1982. 

Denning, Peter J., Computers Under Attack . New York: ACM Press 
(published by Addison Wesley) 1990. 

Diller, Antoni. Z - An Introduction to Formal Methods . New 
York: John Wiley, 1990. 

Fites, Philip, Peter Johnston, and Martin Kratz. The Computer 
Virus Crisis . New York: Van Nostrand Reinhold, 1989. 
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Fites, Philip E., Martin P.J. Kratz, and Alan F. Brebner. 

control And Security of Computer Informati on Systems. USA: 
Computer Science Press, 1989. 

Gasser, Morrie. Building a Secure Computer System . New York: 

Van Nostrand Reinhold, 1988. 

Gries, David. The Science of Programming . New York: 
Springer-Verlag, 1981. 

Highland, Harold J. Computer Virus Handbook . Oxford: Elsevier 

Advanced Technology, 1990. 

Hoffman, Lance J. Modern Methods for Computer Security and 
Privacy . Englewood Cliffs: Prentice-Hall, 1977. 

Hoffman, Lance J. Rouge Programs: Viruses, Worms, and TrQjan 

Horses . New York: Van Nostrand Reinhold, 1990 

Ince, D. C. An Introduction to Discrete Mat hematics and Formal 
System Specif ication . Oxford: Oxford University Press, 

1988. 

Jacobson, Robert V. The PC Virus Con trol Handbook. New York: 
International Security Technology, 1990. 

Ledgard, Henry with John Tauer. Professional Software, Software 
Engineering Concepts . Volume I ♦ Reading: Addison-Wesley , 

1987. 

Leiss, Ernst L. Principles Of Data Security . New York: Plenum 

Press, 1982. 

Levy, Henry M. Capabilitv-Based Co mputer Systems. USA: Digital 

Press, 1984. 

Lobel , Jerome. Foiling the System Breakers-Computer__Sec?nrity And 
Access Control . New York: McGraw-Hill, 1986. 

Longley, Dennis and Michael Shain. Data & Computer 

Security-Dictionary Of Standards Conce pts And Terms. Boca 
Raton: CRC Press, 1989. 

Luckman, David. Programming with Specification. — &D — IntrCdduptldD 
to ANNA, a Language for Specify ing Ada Programs. New York: 
Springer-Verlag, 1990. 

Maekawa, Mamoru, Arthur E. Oldehoeft, and Rodney R. Oldehoeft. 

Operating Svstems-Advanced Concepts . USA: Ben j amin/ Cummings 
Publishing Company, Inc, 1987 
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Macro, Allen and John Buxton. The Craft of Software Engineering . 
Reading: Addison-Wesley , 1987. 

McAfee, John. Computer Viruses. Worms. Data Didders. Killer 

Programs, and Other Threats to Your System . New York: St. 

Martins Press, 1989. 

Merkle, Ralph C. Secrecy. Authentication, and Public Key 

Systems . Ann Arbor, Michigan: UMI Research Press, 1982. 

Moulton, Rolf T. Computer Security Handbook Strategies, and 

Technigues for Preventing Data Loss or Theft . Englewood 
Cliffs, New Jersey: Prentice-Hall, 1986. 

Nguyen, Thuyen and Robert Moskal. Advanced Programmer's Guide to 
OS/2 . New York: Brady Books. 1989. 

Parker, Donn B. Computer Security Management . Reston, Virginia: 
Reston Publishing Company, Inc, 1981. 

Pfleeger, Charles P. Security In Computing . Englewood Cliffs, 
New Jersey, 1989. 

Pyle, I. C. Developing Safety Systems . Hertfordshire U.K.: 
Prentice Hall International, 1991. 

Quarterman, John S., The Matrix. Comp uter Networks and 

Conferencing Systems Worldwide . Bedford: Digital Press 

1990. 

Roberts, Ralph. Computer Viruses . Greensboro: Compute, 1988. 

Seberry, Jennifer and Pieprzyk, Josef. CRYPTOGRAPHY An 

introduction to Computer Security . Brunswick: Prentice 

Hall of Australia Pty. Ltd. 1989. 

Sennett, C.T. (Editor). High Integrity Software . New York: 
Plenum Press, 1989. 

Spafford, Eugene H., Kathleen A. Heaphy, and David J. Ferbrache. 
Computer Viruses . Ardington: ADAPSO, 1989. 

Stoll, Clifford. The Cuckoo's Egg . New York: Doubleday, 1989. 

Wood, Charles C. , William W. Banks^ Segio B. Guarro Abel A. 

Garcia, Viktor E. Hampel, and Henry P. Sartorio. Cgmputpr 
Security. A Comprehensive Controls Checklist . New York: 
John Wiley & Sons, 1987. 

Wood, Patrick H. and Steven G. Kochan. UNIX Sys tem Security. 
Indianapolis: Hayden Books, 1985. 
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Woodcock. Jim and Martin Loonies . Software Engineering 
Mathematics . Reading: Addison-Wesley , 1988. 


Yovits , Marshall C. Advances In Computers, Volume 29 . San 
Diego, California: Academic Press Inc, 1989. 


4_j_ Journal /Magazine Articles and Miscellaneous Reports 

Allen, Brandt. "Threat Teams: A Technique for the Detection and 
Prevention in Automated and Manual Systems," Computer 
Security Journal . Spring 1981: 1-13. 

anon. "Proceeding from the 1990 Workshop on Issues of Integrity 
and Security in an Ada Runtime Environment." Ada Letters , 
November/ December 1990: 88-121. 

AT&T Technical Journal . May/June 1988 vol. 67, no. 3. Special 
Issue on Secure Data Systems. 


Badenhhorst , K. P. and Jan H. P. Eloff. "Computer Security 
Methodology: Risk Analysis and Project Definition." 

Computers and Security June 1990: 339-346. 

BiiN Corporation. Sfit af technical documents fog the MiE 
computer systems . Beaverton: BiiN Corporation, 1988. 

Burns, John, and Mitchell, Chris J. "A Security Scheme for 

Resource Sharing over a Network." Computers §i Security, 
February 1990: SI -15. 

Cole, Robert. "A Model for Security in Distributed Systems." 
computers and Security June 1990: 319-330. 

communications q£ &£M. June 1989. Theme issue on computer 
viruses. 

computers and Security vol 7 no. 2, April 1988, Issue 
concentrates on computer virus programs. 

Computer Security Handbook . Computer Security Institute, 
Northborough, Massachusetts, 1987. 

Computer Security Journal . Computer Security Institute# vol VI, 
no, 1, 1990, Issue on Artificial intelligence and Computer 
Security. 

"Computer Virus Programs (Special issue)". Computers & Security. 
April 1988. 
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Corsini, Paolo and Lanfranco Lopriore. "The Architecture of a 
Capability-Based Microprocessor System." IEEE Micro . June 
1987, 35-51. 

Curry, David A. Improving the Security of Your UNIX System . 

Final Report, April 1990, SRI International ITSTD-721-FR-90- 

21 . 


Davis, F. G. F. and R. E. Gantenbein. "Recovering from a 

Computer Virus Attack." Journal of Systems and Software 
vol . 7, 1988: 235-258. 

Dehnad, Khosrow. "A Simple Way of Improving the Login Security." 
Computers &. Security . November 1989: 607—611. 

Domingo-Ferrer, Josep, and Huguet_Rotger , Liorenc. "Secure 
Network Bootstrapping: An Algorithm for Authentic Key 
Exchange and Digital Signatures." Computers & Security . 

April 1990: 145-152. 

Fak, V. "Are We Vulnerable to a Virus Attack, a Report from 

Sweden." Computers and Security vol 7, April 1988: 151- 

155. 

Feudo, Chris. Antiviral Software Products . George Washington 
University Technical Noted, to be published. 

Gong, Li. "On Security in Capability-Based Systems." Operating 
Systems Review April 1989: 56-60. 

Graft, Donald, Mohnish Pabrai, and Uday Pabrai. "Methodolgy for 
Network Security Design". IEEE Communications Magazine . 
November 1990, 52-58. 

Hartman, Bret and Tad Taylor. "Worked Examples: Demonstrations 

of Verified Security." Internal Note #068 Computational 
Logic Inc. August 5, 1988. 

Horold, C. L. "An Introduction to t he SMITE Approach to Secure 
Computing." Computers & Security . October 1989: 495-505. 

Jobusch, David L. and Oldehoeft, Arthur E. " A Survey of 

Password Mechanisms: Weakness and Potential Improvements." 
Computers 4 Security . December 1989: 675-689. 

Jones, Scott K. and Clinton E. White, Jr. "The IPM Model of 

Computer Virus Management." Computers and Security . August 
1990: 411-418. 

Keefe, T. F. , Tsai, W. T. , and Thuraisingham, M. B. "SODA: A 
Secure Object-Oriented Database System." Computers 4 
Security . October 1989: 517-533. 
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Kurzban, A. Stanley "Defending against Viruses and Worms.” 

Newsletter The Technical Committee on Security k Privacy 
Winter, 1990: 23-40. 

Laferriere, Claude. "A Discussion of Implementation Strategies 
for Secure Database Management Systems." Computers k 
Security . May 1990: 235-244. 

Lloyd, Ivor. "Software Evaluation in High Integrity Systems." 
Computers and Security . August 1990: 419-429. 

McHugh, John. "Trusted Systems, Software Engineering, and 
the Internet Worm." Presentation at the University of 
Houston-Clear Lake, 14 July 1989. 

McHugh, John and George Dinot. "High Performance, Distributed, 
Multi Level Secure Computing." Internal Note #062 
Computational Logic Inc. July 21, 1988. 

McLean, John. "The Specification and Modeling of Computer 
Security." Computer . January 1990: 9—16 . 

McKosky, Robert A. and Sajjan G. Shiva. "A File Integrity 
Checking System to Detect and Recover from Program 
Modification Attacks in Multi-User Computer Systems." 
computers and Security . August 1990: 431-446. 

Mercer, Lindsay C. J. "Tailor-made Auditing of Information 

Systems for the Detection of Fraud." Computers & Security , 
February 1990: 59-66. 

Muftic, Sead. "Transaction Protection by 'Antennas'." Computer 4 
Security . May 1990: 245-255. 

Paans, R. , and Herschberg, I. S. "Auditing the Change Management 
Process." Computers 4 Security . April 1990: 161-174. 

Parnas, David Lorge and Yabo Wang. The Trace Assertion Metho d 
Module interface Specification . Technical Report 89-261 
ISSN-0836-0227 Queen's University, Kingston, Ontario, 
October 1989. 

Parnas, David L. , John van Schouwen, and Shu Po Kwan. 

"Evaluation of Safety-Critical Software." Communications 
the ACM . June 1990, vol. 33, no. 6. pp. 636-648. 

Preneel, Bart, and Bosselaere, Antoon, and Govaerts, Rene, and 
Vanewalle, Joos. "Cryptanalysis of a Fast Cryptographic 
Checksum Algorithm." Computers 4 Secu rity, May 1990: 257- 

262. 
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Pozzo, M. M. and T. E, Gray. "An Approach to Containing Computer 
Viruses." Computers and Security . vol. 6, no. 4, 1987: 
321-331. 

Ramaswamy, Raju. "A Key Management Algorithm for Secure 

Communication in Open Interconnection Architecture." 

Computer & Security . February 1990: 77-84. 

Ramaswamy, Raju. "Security Architecture for Data Transfer through 
TCP/IP Protocols." Computers & Security , December 1989: 
709-720. 

Ramaswamy, Raju "Placement of Data Integrity Security Services in 
Open Systems Interconnection Architecture." Computer s & 
Security . October 1989: 507-516. 

Spafford, Eugene H. "The Internet Worm: Crisis and Aftermath." 

Commun i cations of the ACM . June 1989: 678-687. 

Sandhu, Ravi. "Current Status of the Safety Problem in Access 
Control." The Technical Committee in Security k Privacy , 

Fall 1989: 37-46. 

Smulders, Peter. "The Threat of Information Theft by Reception of 
Electromagnetic Radiation from RS-232 Cables." Computers &. 
Security . February 1990: 53-58. 

Stoll, Clifford. "Stalking the Wily Hacker." Communications of 
the ACM . May 1988: 484-497. 


Thuraisingham, Bhavani and Chase, Frederick. An Ob:ject_Oriented 
Approach for Designing Secure Software Systems, flews let 
of The Technical Committee sn Security & Privacy, Fall 1989: 

7-14. 


Thuraisingham, M.B. "A Functional View of Multilevel Databases." 
computers & Security , December 1989: 721-730. 


Varadharajan, Vi jay. "Verification of Network Security 
Protocols." Computers & Security , December 1989: 


693-708. 


Winters, Peter. 
Strategy. " 


"Secure Systems Design - An Evolving National 
computers and Security , August 1990: 379-389. 


Zviran, Moshe, 
Analysis. 


and Hoge James C. "SPAN-A DSS for Security Plan 
» Computers & Security , April 1990: 153-160. 
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5, Conferences, Proceedings and Tutorials 

The following is a list of proceedings and tutorials that are 
available at the UHCL or UH-UP libraries and/or at RlCIS SERC. 

The conferences represent a mixture of orientation such as 
research, national forum, and systems. 

IEEE Computer Society: 

The IEEE Symposium on Security and Privacy. Research 
oriented. Attendance limited to approximately 350+ . Meets 
annually in Oakland, California during early May. 

7-9 April 1986. Oakland, California. 

27-29 April 1987. Oakland, California. 

18-21 April 1988. Oakland, California. 

1-3 May 1989. Oakland, California. 

7-9 May 1990. Oakland, California. 

The Computer Security Foundations Workshop II. Franconia, 
Hew Hampshire, June 11-14, 1989. This is an invited 
workshop attended by approximately 35 research 
professionals . 

Tutorial: Abrams, Marshall D. and Harold J. Podell. 

Computer and Network Security . IEEE Computer Society Press, 
1986. ISBN 0-8186-0756-4. 

Tutorial: Agresti, William W. New Paradigms for Software 

Development . Washington: IEEE Computer Society Press. 

1986. 

Tutorial: Boehm, Barry W. Software Risk Management . Los 

Alamitos: IEEE Computer Society Press, 1989. 

ISBN 0-8186-8906-4 

Newsletter of the IEEE Computer Society Technical Committee 
on Security and Privacy. Published approximately four times 
per year. 

National Computer Security Center (NCSC) and National Institute 
of Standards and Technology (NIST, the new name for the National 
Bureau of Standards) : National Computer Security Conference . 

National policies, management issues, technology (25%) . Held 
annually during October in the Washington-Baltimore area. 

7th DOD/NBS Computer Security Conference . September 1984. 
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Proceedings of the 10th National Computer Security 
conference . September 1987. 

Proceedings 12th National Computer Security Conference . 10- 
13 October 1989. Baltimore, Maryland. 

Proceedings 13th National Computer Security Conference . 1-4 
October 1990. Washington, D.C. 

American Society for Industrial Security and Aerospace Computer 
Security Associates: 

Annual Computer Security Applications Conference (formerly 
the Aerospace Computer Security Applications Conference and 
co-sponsored by the AIAA. ) System issues. The 5th was held 
in Tucson, Arizona during December 1989. The 6th is 
scheduled for Tucson in December 1990. The 7th is scheduled 
for Florida in December 1991. 

Tutorial: Gasser, Morrie. Secure System Design - &n 

introduction . Presented at the Fifth Annual Computer- 
Applications Conference, December 4,1989, Tucson, Arizona. 

Tutorial: Gligor, Virgil. Secure System pegjgn - Advance. 

Presented at the Fifth Annual Computer Applications 
Conference, December 4,1989, Tucson, Arizona. 

Many other workshops, commercial conventions, etc. are on the 
national calendar. The International Federation of Information 
Processing (IFIP) hosts an annual international conference. 

Proceedings Information Security and Integrity Systems • SEPEC 
Seminar Series. 15-16 May 1990. University of Houston- 
Clear Lake. 

Advances in Crvptologv-CRYPTO '87 . Proceedings of the Advances in 
Cryptology Conference. 16—20 August 1987. Santa Barbara, 
California. Berlin Heidelberg: Springer-Verlag, Lecture 
Notes in Computer Science, 1988. 

Computer Viruses . Proceedings of an Invitat ional Symposium* 

10-11 October 1988. Hosted by Deloitte Haskins & Sells. 
Cosponsored with Information Systems Security Association. 
New York: 1989. 

Ada in Industry. Proceedings the Ada-Europe International 
Conference . 7-9 June 1988. Munich. 

8th Annual National Conference nn Ada Technology. 1990, Atlanta. 


11 


Proceedings Fifth Interna tional Workshop fin Software — 

Specification and Design . 19-20 May 1989. Pittsburgh, 
Pennsylvania . 

Proceeding of the SIGSOFT International WopKshPP on Fprmal 

Methods in Software Development . 9-11 May 1990. Napa, 
California. 

Dependable Computing for Critical Applications. 18-20 February 
1991. Tucson, Arizona. 

Individual articles are cited below: 

Adkins, Marc M. , Gary Dolsen, Jody Heany, and John Page. "The 
Argus Security Model." Proceedings 12th National Computer 
Security Conference . 10—13 October 1989. Baltimore, 

Maryland. pp. 123-134. 

Alstad, J. P. and C. M. Brophy. "The Role of'System Build" in 

Trusted Embedded Systems." Proceedings of the Hill National 
computer Security Conference. 1-4 October 1990. 

Washington, D.C. pp. 172-181. 

anon. "Virus and Worm Incident Reports." NASA Internal Brief inq 
Charts 21 April 1990. . Published in the Appendix to the 
Information Security and Integrity Systems Symposium held at 
the University of Houston-Clear Lake, 15-16 May 1990. 

Arbouw. "Security in Multi-Company Networks," Proceed inq § Si 
the second European Conference fin Computer Audits Sfintrfil 
and Security . (Amsterdam, the Netherlands), November 1987. 
Paper 49 

Benson, G., W. Appelbe, and I. Akyildiz. "The Hierarchial Model 
of Distributed System Security." Proceedings fif the IEEE 
symposium on Security and Privacy . 1-3 May 1989. Oakland, 
California, pp. 194-203. 

Bell, D. Elliott. Concerning "Modeling" of Computer Security." 

' Proceedings fif the IEEE Symposium fin Security anti Privacy . 
18-21 April 1988. Oakland, California. 

Bishop, Matt. "A Model of Security Monitoring." Proceedings fif 
the Fifth Annual Computer Security Applications Conference . 
4-8 December 1989. Tucson, Arizona, pp. 46-52. 

Bolognesi, Tommaso. "On the Soundness of Graphical 

Representation of Interconnected Processes in LOTOS." 
Proceeding fif fhfi ASM SIGSOFT International Wg j^ csho fi fin 
Formal Methods in Software Development- 9-11 May 1990. 

Napa, California, pp. 1-7. 
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Brewer, David D. C. and Michael Nash. "The Chinese Wall Security 
Policy." Proceedings of ttje IEEE Symposium on Security ana 
Privacy . 18-21 April 1988. Oakland, California. pp. 206- 
214 . 

Casey, T. A. and et.al. "A Secure Distributed Operating System." 
Proceedings of the IEEE Symposium on Security and privacy . 
18-21 April 1988. Oakland, California. 


Campbell, Marlene. "Security and Privacy: Issues of 

Professional Ethics." Procee dings of the 10th Nationa l. 
Commuter Se curity Conference. 21-24 September 1987. 
National Bureau of Standards. Gaithersburg, Maryland, pp. 
326-333 . 


Chung, Anthony and Sidhu, Deepinder. "Experience with an Estelle 
Development System." Proceeding of t]ie A£M glGSO Ff 
international Workshop on Formal Method? in Spftwsre 
Development . 9-11 May 1990. Napa, California, pp. 8-17. 


Clark, David D. and David R. Wilson. "A comparison of commercial 
and Military Security Policies." Proceedings of tiie IEEE 
Symposium on Security and Privacy. 27—29 April 1987. 
Oakland, California. 


Cohen, Fred. "Computer Viruses: Theory and Experiments." Ifk 
dod/NBS Computer Security Conference. September 1984. 
National Bureau of Standards. 


Cornwell, M.R. "A Software Engineering Approach to Designing 

Trustworthy Software." Proceedings of the IEEE Symposiu m on 
Security and Privacy . 1-3 May 1989. Oakland, California, 
pp. 148-156. 


Courtney, Robert H. "Factors Effecting the Availability of 

Security Measures in Data Processing Systems Components. 
Proceedings of the 13th National Computer Security 
Conference . 1-4 October 1990. Washington, D.C. pp. 503- 

514. 


Davis 


Russell. "Exploring Computer Viruses." PrQceeflings j. 
Fourth Aerospace Computer Security Application s Conference. 
12-16 December 1988. Orlando, Florida, pp. 7-12. 


Denning, Dorothy. "An Intrusion-Detection Model." PrQCeedipg s 
of the IEEE Symposium on Security an£ Privacy. 7-9 April 
1986. Oakland, California. 


Denning, Dorothy. "A Multilevel Relational Data Model. 
Proceedings of fhe IEEE Symposium on, Security and 
27-29 April 1987. Oakland, California. 


ft 
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Denning, Dorothy and et.al. "The SeaView Security Model." 

Proceedings af the IEEE Symposium on Security and Privacy . 
18-21 April 1988. Oakland, California. 

Di Vitto, Ben L. and et. al. "Specification and Verification of 
the ASOS Kernel . " Proceedings of the IEEE Symposium on 
Security and Privacy . 7-9 May 1990. Oakland, California, 
pp. 61-74. 

Di Vitto, Ben L. and et. al. "The Deductive Theory Manager: A 

Knowledge Based System for Formal Verification." ~ 
Proceedings of the IEEE Symposium on Security and Privacy . 
7-9 May 1990. Oakland, California. pp. 306-318. 

D'Ippolito, Richard S. and Charles P. PI inta. "Software 
Development Using Models." Proceedings of the Fifth 
International Workshop on Software Specification and Design . 
May 19-20, 1989, Pittsburgh, Pennsylvania. pp. 140-142. 

Dobson, J.E. and J. A. McDermid. "A Framework for Expressing 
Models of Security Policy". Proceedings of the IEEE 
Symposium on Security and Privacy . 1-3 May 1989. Oakland, 
California, pp. 229-239. 

Eichin, M.W. , and J. A. Rochlis. "With Microscope and Tweezers: 
An Analysis of the Internet Virus of November 1988." 
Proceedings of the IEEE Symposium on Security and Privacy . 
1-3 May 1989. Oakland, California, pp. 326-343. 

Fernandez, E.B., E. Gudes, and H. Song. "A Security Model for 
Object Oriented Databases." Proceedings of the IEEE 
Symposium on Security and Privacy . 1-3 May 1989. Oakland, 
California, pp. 110-115. 

Gajnak, George E. "Some Results from the Entity/Relationship 
Multilevel Secure DBMS Project." Proceedings : Fourth 

Aerospace Computer Security Applications Conference . 12-16 
December 1988. Orlando, Florida, pp. 66-71. 

Garlan, David. "The Role of Formal Reusable Frameworks." 

Proceeding of the ACM SIGS0FT International Workshop sn 
Formal Methods in Software Development . 9-11 May 1990. 

Napa, California, pp. 42-44. 

Garnett, Paul D. "Selective Disassembly: A First Step Towards 

Developing a Virus Filter." Proceedings: Fourth Aerospace 

Computer Security Applications Conference . 12-16 December 
1988. Orlando, Florida, pp. 2-6. 


14 


Garrabrants, William M. , Lance J. Hoffman, Alfred W. Ellis III, 
and Maghdi Kamel. CERTS : h COMPARATIVE EVALUATION METHOD 

FOR RISK MANAGEMENT METHODOLOGIES MS TOOLS . Internal 
Technical Note George Washington University, undated. 
Published in the Appendix to the Information Security and 
Integrity Systems Symposium held at the University of 
Houston-Clear Lake, 15-16 May 1990. 

Gong, Li. "A Secure Identity-Based Capability System." 

Proceedings of the IEEE Symposium on Security and Privacy . 

1-3 May 1989. Oakland, California, pp. 56-63. 

Gong, Li, Roger Needham, and Raphael Yahalom. "Reasoning about 
Belief in Crytographic Protocols." Proceedings of the IEEE 
Symposium on Security and Privacy . 7-9 May 1990. Oakland, 

California, pp. 234-248. 

Graubart, Richard. "On The Need for a Third Form of Access 
Control." Proceedings 12th National Computer Secu r i t y 
Conference . 10-13 October 1989. Baltimore, Maryland, pp. 
296-304. 

Green, James L. and Patricia L. Sisson. "The "Father Christmas 
Worm"." Proceedings 12th National Computer Security 
conference . 10-13 October 1989. Baltimore, Maryland, pp. 
359-368. 

Harrison, Linda J. "Security Issues and Ada Runtime Support." 
Proceedings of the Fifth Annual Computer Security 
Applications Conference . 4-8 December 1989. Tucson, 

Arizona, pp. 177-183. 

Hohheb , Albert. "Integrating Computer Security and Software 

Safety in the Life Cycle of Air Force Systems." Proceedings 
of the 13th National Computer Security Conference . 1-4 
October 1990. Washington, D.C. pp. 515-525. 

Housley, Russell. "Security Labels in Open Systems 

Interconnection." Proceedings of the 13th National Computer 
Security Conference . 1-4 October 1990. Washington, D.C. 

pp. 37-43. 

Israel, Howard. "Computer Viruses: Myth of Reality?." 

Proceedings of the 10th National Computer Security 
conference . 21-24 September 1987. National Bureau of 
Standards. Gaithersburg, Maryland, pp. 226-230. 

Jacky, Jonathan. "Formal Specifications for a Clinical Cyclotron 
Control System." Proceeding fif the ACM SIGSOFT 
International Workshop on Formal Methods in Software 
Development . 9-11 May 1990. Napa, California. pp. 45-54. 


15 


Jajodia, Sushil and Boris Kogan. "Integrating an Object-Oriented 
Data Model with Multilevel Security." Proceedings af the 
IEEE Symposium on Security and Privacy . 7-9 May 1990. 
Oakland, California, pp. 76-85. 

Johnson, Howard L. "A Mission Critical Approach to Network 
Security." Proceedings af the 10th National Computer 
Security Conference . 21-24 September 1987. National Bureau 
of Standards. Gaithersburg, Maryland, pp. 15-24. 

Johnson, Howard L. "Security Protection Based on Mission 

Criticality." Proceedings: Fourth Aerospace Computer 

Security Applications Conference . 12-16 December 1988. 
Orlando, Florida, pp. 228-232. 

Johnson, Howard L. "Security for Embedded Tactical Systems." 

Proceedings 12th National Computer Security Conference. 10- 
13 October 1989. Baltimore, Maryland, pp. 339-348. 

Jueneman, Robert R. "Integrity Controls for Military and 

Commercial applications." Procee dings : Fgurth Aerospace 

computer Security Applications Conference . 12-16 December 
1988. Orlando, Florida, pp. 298-322. 


Kain, Richard and Carl Landwehr. "On Access Checking in 
Capability-Based Systems." Proceedings a£ £ha IEEE 
symposium on Security and Privacy . 7-9 April 1986. 

Oakland, California. 

Karger, Paul A. "Limiting the Damage Potential of Discretionary 
Trojan Horses." Proceedings of the IEEE Symposium on 
Security and Privacy . 27-29 April 1987. Oakland, 
California. 

Karger, Paul A. "Implementing Commercial data Integrity with 

Secure Capabilities." Proceedings a£ the IEEE Symposium an 
Security and Privacy . 18-21 April 1988. Oakland, 
California. 

Karger, Paul A. "New Methods for Immediate Revocation." 

Proceedings af IEEE Symposium on Security and Privacy ♦ 

1-3 May 1989. Oakland, California, pp. 48-55. 

Keefe, T. F. and W. T. Tsai. "Security Model Consistency in 

Secure Object-Oriented Systems." Proceedings af the Fifth 
Annual Computer Security Applications Conferensa- 4-8 
December 1989. Tucson, Arizona, pp. 290-298. 

Korelsky, Tanya et.al. "Security Modeling in the Ulysses 

Environment." Proceedings; Fourth Aerospace Computer 
security Applications Conference . 12-16 December 1988. 
Orlando, Florida, pp. 386-392. 


16 


Kurzban, S. A. "Antiviral measures-which one pays?." Computer 
Viruses . Proceedings of an Invitational Symposium . October 
1988. Deloitte Haskins & Sells. NewJfork. pp . 56-67. 

Lin. T. Y. "Chinese Wall Security Policy - An Aggressive Model." 
Proceedings of the Fifth Annual Computer Security 
Applications Conference . 4-8 December 1989. Tucson, 
Arizona, pp. 282-289. 

Loepere, Keith P. , Franklin D. Reynolds, E. Douglas Jensen, and 
Teresa F. Lunt. "Security for Real Time Systems." 
Proceedings of the 13th National Computer Security 
Conference . 1-4 October 1990. Washington, D.C. pp. 318- 
332. 

Logrippo, Luigi, Melanchuk, Tim, and Du Wors, Robert J. "The 
Algebraic Specification Language LOTOS: An Industrial 

Experience." Proceeding of the ACM SIGSOFT International 
Workshop on Formal Methods in Software Development . 9-11 
May 1990. Napa, California. pp. 59-66. 

London, R. L. and K. R. Milsted. "Specifying Reusable Components 
Using Z: Realistic Sets and Dictionaries." Proceedings £f 

the Fifth International Workshop on Software Specification 
and Design . May 19-20, 1989, Pittsburgh, Pennsylvania. 
120-127. 

Marceau, Carla C. and Douglas Harper. " An Interactive Approach 
to Ada Verification." Proceedings 12th National Computer 
Security Conference . 10-13 October 1989. Baltimore, 

Maryland, pp. 28-51. 

Marmor-Squires, Ann, John McHugh, and Martha Branstad. "A Risk 
Driven Process Model for the Development of Trusted 
Systems." Proceedings of the Fifth Annual Computer Security 
AppI ications Conference . 4-8 December 1989. Tucson, 
Arizona. pp. 184-192. 

Maymir-Ducharme , Fred A., David Preston, and Mary Armstrong. 
"Combining Security, Embedded Systems, and Ada Puts the 
Emphasis on the RTE: ARTEWG Establishes a Security Task 

Force." Proceedings of the 13th National Computer Security 
Conference . 1-4 October 1990. Washington, D.C. pp. 182- 
188. 

McEnerney, Joseph, Randall Brown, and D. G. Weber. "Automated 
Extensibility in THETA." Proceedings of the 13th National 
Computer Security Conference . 1-4 October 1990. 

Washington, D.C. pp. 144-153. 


17 


McHugh, John. "Environments for Building Secure Systems." 
Proceedings: Fourth Aerospace Computer Security 

Applications Conference . 12-16 December 1988. Orlando, 
Florida. pp. 146-147. 

McLean, John. "Security Models and Information Flow." 

Proceedings of the IEEE Symposium ojq Security and Privacy . 
7-9 May 1990. Oakland, California, pp. 180-187. 

Melhart , Bonnie E., Nancy G. Leveson, and Matthew S. Jaffe. 
"Analysis Capabilities for Requirements Specified in 
Statecharts. " Proceedings 2f the Fifth International 
Workshop on Software Specification and Design . May 19-20, 
1989, Pittsburgh, Pennsylvania, pp. 100-102. 

Mol ini, James E. and Chris W. Ruhl. "The Virus Intervention & 
Control Experiment." Proceedings of the 13th National 
Computer Security Conference . 1-4 October 1990. 

Washington , D . C . pp. 366-37 3 . 

Moser. L. E. "Graph Homomorphisms and the Design of Secure 

Computer Systems . " Proceedings of the IEEE Symposium on 
Security and Privacy . 27-29 April 1987. Oakland, 
California. 


Narayana, K. T. and Dharap Sanjeev. "Invariant Properties in a 

Dialog System." Proceeding q£ £&£ &QI SIGSOFT Internatjohal 
Workshop on Formal Methods in Software Development. 9-11 
May 1990. Napa, California, pp. 67-79. 

Nelson, Ruth, David Becker, Jennifer Brunell, and John Heimann. 

"Mutual Suspicion for Network security." Proceedings of the 
13th National Computer Security Conference. 1-4 October 
1990. Washington, D.C. pp. 228-236. 

Nessett, D.M. "Factors Affecting Distributed System Security." 
Proceedings of the IEEE Symposium on Security ansi Privacy < 
7-9 April 1986. Oakland, California. 

Norvell, William. "Introduction of Security into the Acquisition 
Life Cycle." Proceedings 12th National Computer Security 
Conference . 10-13 October 1989. Baltimore, Maryland, pp. 

408-417.' ^ 


Page, John, Jody Heaney, Marc Adkins, and Gary Dolsen. 

"Evaluation of Security Model Rule Bases." Proceed ings 12th 
National Computer Security Conference. 10-13 October 1989. 
Baltimore, Maryland, pp. 98-111. 


18 



Page, John. "An Assured Pipeline Integrity Scheme for Virus 

Protection." Proceedings 12th National Computer Security 
Conference . 10-13 October 1989. Baltimore, Maryland, pp. 
378-388. 

Parker, Tom. "The VME High Security Option." Proceedings of the 
13th National Computer Security Conference . 1-4 October 
1990. Washington, D.C. pp. 404-413. 

Pett, M. M. , M. D. Rice and S. B. Seidman. "A Formal Framework 
for the Design of Development Environments." Proceedings 
of the Fifth International Workshop on Software 
specification and Design . May 19-20, 1989, Pittsburgh, 
Pennsylvania, pp. 284-286. 

Proctor, Norman and Raymond Wong. "The Security Policy of the 

Secure Distributed Operating System Prototype." Proceedings 
of the Fifth Annual Computer Security Applications 
Conference . 4-8 December 1989. Tucson, Arizona, pp. 95- 

102 . 

Rajunas, S. A. and et. al. "Security in Keykos." Proceedings of 
the IEEE Symposium an Security and Privacy . 7-9 April 1986. 
Oakland, California. 

Ramamma, S. and J. F. Peters. "Design of Integrity for 

Distributed Systems." JLfh Annual National Conference on Ml 
Technology . 1990. Atlanta. 

Ramsey, Norman. "Developing Formally Verified Ada Programs." 

Proceedings of the Fifth International Workshop on Software 
specification and Design . May 19-20, 1989, Pittsburgh, 
Pennsylvania, pp. 257-265. 

Rao, K. N. "Security Audit for Embedded Avionics Systems." 
Proceedings of the Fifth Annual Computer Security 
Applications Conference . 4-8 December 1989. Tucson, 
Arizona, pp. 78-84. 

Rivera, Angel L. "C2 Security and Microcomputers." Proceedings 
of the 13th National Computer Security Conference . 1-4 
October 1990. Washington, D.C. pp. 613-620. 

Roskos, J. Eric, Stephen R. Welke, John M. Boone, and Terry 

Mayfield. "A Taxonomy of Integrity Models, Implementations 
and Mechanisms." Proceedings of the 13th National Computer 
Security Conference . 1-4 October 1990. Washington, D.C. 
pp. 541-551. 


19 



Rowe, Kenneth E. and Clarence 0. Ferguson, Jr. "Ada 

Technology/ COMPUSEC Insertion Status Report." Proceedings 
of the 10th National Computer Security Conference . 2^1 -24 
September 1987. National Bureau of Standards. 

Gaithersburg, Maryland, pp. 357-361. 

Sandhu, Ravi. "Transaction Control Expressions for Separation of 
Duties." Proceedings: Fourth Aerospace Computer Security 

Applications Conference . 12-16 December 1988. Orlando, 
Florida. pp. 282-286. 

Shaw, Mary. "Larger Scale Systems Require Higher-Level 

Abstractions." Proceedings of £he Fifth International 
Workshop on Software Specification and Design . May 19-20, 
1989, Pittsburgh, Pennsylvania, pp. 143-147. 

Smaha, Stephen E. "Haystack: An Intrusion Detection System. 

Proceedings: Fourth Aerospace Computer Security 

AppI icat ions Conference . 12-16 December 1988. Orlando, 
Florida, pp. 37-44. 

Smith, Gary W. "Modeling Security-Relevant Data Semantics." 

Proceedings of the IEEE Symposium on Security £&£ Privacy. 
7-9 May 1990. Oakland, California, pp. 384-391. 

Spafford, Eugene H. Computer Viruses . Professional Development 
Seminar, Washington D. C. Chapter of the ACM. 1989. 

Stevens, Jennie A. and Richard E. Wiener. "A Structured Approach 
to Risk Assessment : An Innovative Concept." PrQS.eedings 
12th National Computer Security Conference . 10-13 October 
1989. Baltimore, Maryland. pp. 472-482. 

Stoll, Cliff. "What Do You Feed a Trojan Horse?." Proceedings 
of the loth National Computer Security Conference. 

September 1987. National Bureau of Standards, pp. 231-237. 

Stoll, Cliff. "Telling the goodguys: Disseminating Information 

on Security Holes." Proceedings; Fourth Aerospace Computer 
Security Applications Conference . 12-16 December 1988. 
Orlando, Florida, pp. 216-218. 

Stoll, Cliff. "An Epidemiology of Viruses & Network Worms." 

Proceedings 12th National Computer gecurity CPhferenge. 10- 
13 October 1989. Baltimore, Maryland, pp. 369-377. 

Teng, Henry S., Kaihu Chen, and Stephen C-Y Lu. "Adaptive 

Real-Time Anomaly Detection Using Inductively Generated 
Sequential Patterns." Proceedings fif the IEEE gymposjuB on 
Security and Privacy . 7-9 May 1990. Oakland, California, 

pp. 278-284. 


20 



Terry, Phil, and Simon Wiseman. "A 'New' Security Policy 

Model." Proceedings of the IEEE Symposium SB Security and 
Privacy . 1-3 May 1989. Oakland, California. pp. 215-228. 

Thurshingham, M. B. "A Multilevel Secure Object_Oriented Data 
Model." Proceedings 12th National Computer Security 
conference. 10-13 October 1989. Baltimore, Maryland. 


Troxell , E.F.T. and J. Peter. "An isolation mechanism for the 
evaluation of software for malicious code." Computes 
Viruses . Proceedings of an Invitat ional Symposium. October 
1988. Deloitte Haskins & Sells. New York. pp. 59-63. 


Varadharajan, Vijay, and Stewart Black. "Formal Specification of 
a Secure Distributed Messaging System." Proceedings 12th 
National Computer Security Conference. 10-13 October 1989. 
Baltimore, Maryland. 


Vinter, Stephen T. "Extended Discretionary Access Controls. 

Proceedings of tiie IEEE Symposium on Security; and Privacy . 
18-21 April 1988. Oakland, California. 


Wagner, David A. "System Security in the Space Flight Operations 
Center." Proceedings: Fourth Aerospace Computer Securit y 

Applications Conference . 12-16 December 1988. Orlando, 

Florida, pp. 426-430. 


Waldhart , Neil A. "The Army Secure Operating System." 

Proceedings of the IEEE Symposium on Security and Priv a c y. 
7-9 May 1990. Oakland, California, pp. 50-60. 


Walker, Stephen. "Network Security: The Parts of the Sum." 

Proceedings of t^e IEEE Symposium on Security Privacy . 

1-3 May 1989. Oakland, California, pp. 2-9. 


Weber, D. G. "Formal Specification of Fault_Tolerance and its 
Relation to Computer Security." Proceedings gf the Fiftfi 
Tnt- ernat ional Workshop on Software Specificatio n and pesrqn . 
May 19-20, 1989, Pittsburgh, Pennsylvania, pp. 273-277. 


Weiss, Jonathan D. and Edward G. Amoroso. "Ensuring Software 
Integrity." Proceedings : Fourth &erospacg Computer 

Security Applications Conference . 12-16 December 1988. 
Orlando, Florida, pp. 323-330. 

Wiedemann, P. H. "On the Control and Dissemination of 
Information Concerning Security Flaws and their 
Corrections." Proceedings: Fourth fterospac g Compute r 

security Applications Conference. 12-16 December 1988. 
Orlando, Florida, pp. 221-225. 


21 



William, J. C. and G. W. Dinolt. "A Graph-Theoret ic Formulation 
of Multilevel Secure Distributed Systems: An Overview." 
Proc&edincrs of the IEEE Symposium on Security and Privacy . 
27-29 April 1987. Oakland, California. 


Winkler, J. R. and W. J. Page. "Intrusion and Anomaly Detection 
in Trusted Systems." Proceedings of the Fifth Annual 
Computer Security Applications Conference . 4-8 December 

1989. Tucson, Arizona, pp. 39-45. 

Wiseman, Simon. "A Secure Capability Computer System." 

Proceedings of the IEEE Symposium on Security and Privacy . 
7-9 April 1986. Oakland, California. 

Wood, William G. "Application of Formal Methods to System and 
Software Specification." Proceeding of the ACM SIGSOFT 
International Workshop on Formal Methods in Software 
Development . 9-11 May 1990. Napa, California. pp. 144- 
146. 

Woodcock, Mark E. "The Use of Ada in Secure and Reliable 
Software." Proceedings of the 10th National Computer 
Security Conference . September 1987. National Bureau of 
Standards, pp. 362-365. 

Wong, Raymond M. and Y. Eugene Ding. "Providing Software 
Integrity Using Type Managers." Proceedings: Fourth 

Aerospace Computer Security Applications Conference . 12-16 
December 1988. Orlando, Florida, pp. 287-294. 

Young, C. L. "Taxonomy of Computer Virus Defense Mechanisms." 
Proceedings tb£ 10th National Computer Se cu ri t y 
Conference . September 1987. National Bureau of Standards, 
pp. 220-225. 

Young, William D. "Gypsy and Z, Comparing Specification 

Paradigms . " Proceedings 12th National Computer Security 
Conference . 10-13 October 1989. Baltimore, Maryland, 

Young, W. D. and John McHugh. "Coding for a believable 

Specification to Implementation Mapping." Proceedings 
the IEEE Symposium on Security and Privacy . 27-29 April 
1987. Oakland, California. 


22 


6. government: Doeupanta and Contractor Reports 

Acronyms : 

NCSC - National Computer Security Center 

NIST - National Institute for Standards and Technology 

DOD - Department of Defense 

NASA Documents 

NASA Headquarters Washington, D.C. Interim Policy on Computer 
Software . NASA Associate Administrator for Management 
letter NTD Aug. 4 1989. , 

NASA Lyndon B. Johnson Space Center. "Disaster Recovery Plan." 
CSC-MQ02 1 . March 1988. 

NASA Johnson Space Center, "Data Processing Installation Computer 
Security Officials Training Course." Course material 
prepared by the Computer Sciences Corporation, August 1989. 

"NASA ADP Risk Analysis Guideline." NASA Contractor Report 

prepared by EDP AUDIT CONTROLS, INC contract NASA 3548, July 
1984. 

NASA Johnson Space Center. "Johnson Space Center Automated 

Information Systems Security Plans." JSC-23668 April 1989. 

United States National Aeronautics & Space Administration. Office 
of Management. NASA Computer Security Program. NASA 
Handbook 2410. X (Draft). Bethesda, MD: September 30, 1989. 

Government (Non NASA) Documents Some of the following documents 

are from the "rainbow" series. 

National Computer Security Center. Study q £ the Use sf Ada in 

Trusted Computing Bases (TCBs) £2 fes Certified at, qe Below, 
the B3 Level . Final Report by IIT Research Institute, 
Lanham, MD prepared for the NCSC, Fort Meade, MD. April 
1989. 

National Computer Security Center. Final Evaluation Repog j 2i 
Computer Security Corporation Sentinel . Version 3.13. 
CSC-EPL-87/004 . Fort George G. Meade, MD. July 13, 1987. 

National Computer Security Center. Final Evaluation Report 

Computer Security Corporation. CITADEL. CSC-EPL-88/006. 
Fort George G. Meade, MD. September 1, 1988. 

National Computer Security Center. & Guide lo Underst anding 
Audit In Trusted Systems . NCSC-TG-001. Version-2. Fort 
George G. Meade, MD. June 1, 1988. 


National Computer Security Center. A Guide To Understanding 

Discretionary Access Control In Trusted Systems. NCSC-TG- 
003. Version-1. Fort George Meade, MD. September 30, 
1987. 

National Computer Security Center. Glossary. £>£ Computer Security 
Terms . NCSC-TG-004. Version-1. Fort George G. Meade, MD. 
October 21, 1988. 

National Computer Security Center. Trusted Network 

Interpretation . NCSC-TG-005. Version-1. July 31, 1987. 

"The Red Book." 

National Computer Security Center. & Guide 1® Understand jng 

Configuration Management In Trusted Systems . NCSC-TG-006. 
Version-1. Fort George G. Meade, MD. March 28, 1988. 

National Computer Security. A Guide To Understanding Design 

Documentation In Trusted Systems . NCSC-TG— 007 . Version— 1. 
Fort George G. Meade, MD. October 2, 1988. 

National Computer Security. A Guide 12 Understanding Trusted 
Distribution In Trusted Systems ♦ NCSC-TG— 008. Version-1. 

Fort George G. Meade, MD. December 15, 1988. 

National Computer Security Center. Computer Security Subsystem 
Interpretation Of The Trusted Computer System Evaluation 
Criteria. NCSC-TG-009. Version-1. Fort George G. Meade, MD. 
September 16, 1988. 

National Computer Security Center. Guidelines £o£ Formal 

Verification Systems . NCSC-TG-014. Version-1. George G. 
Meade, MD. April 1, 1989. 

National Computer Security Center. Personal Coppices Security 
Consideration. NCSCPub WA-002-85 George G. Meade, MD. 

1985. 

Rome Air Development Center. "Foundations of Ulysses : Ih£ 

Theory of Security . Odyssey Research Associates, Inc. RADC- 
TR-87-222 Interim Report July 1988. (Darly McCullough). 

United States Department of Commerce. National Institute of 

Standards and Technology. General Security Requirements Zffit 
Cryptographic Modules. (Working Draft) . Federal Information 
Processing Standard (FIPS) Publication 140—1. November 15, 
1989. 

United States Department of Defense. Computer Security Center. 
Department Defense Password Management guifleUn&L. 
CSC-STD-002-85 . Fort George G. Meade, MD. April 12; 1985. 


I 


24 


United States Department of Defense. Computer Security Center. 

computer Security Requirements -- Guidance Fox Applying Hie 
Department of Defense Trusted Computer System Evaluation 
criteria In Specific Environments . CSC-STD-003-85 . Fort 
George G. Meade, MD June 25, 1985. 

United States Department of Defense. Computer Security Center. 

Technical Rationale Behind CSC-STD-003-85 : Com put er Security 
Requirements — Guidance For Applying The Department of 
Defense Trusted Computer System Evaluation Criteria In 
Specific Environments. CSC-STD-004-85 . Fort George G. 
Meade, MD. June 25, 1985. 

United States Department of Defense. Command, Control, 

Communications and Intelligence. Department of Defense 
Standard. Department Qf Defense Tested Computer System 
Evaluation Criteria. DOD 5200.28-STD. December 1985. "The 
orange book." 

United States Department of Defense. Automation Support and 

Technology. Protection of Logistics Unclass ified/Sengitiy® 
Systems (PLUS) . Final Report. Volume I. October 30, 1989. 

United States Military Academy. Jomine. Clausewjtz,. Mid 
Schlieffen . West Point: 1971. 

United States National Telecommunications And Information Systems 
Security. NTISSAM COMPUSEC/1-87 . Advisory Memorandum Qn 
Office Automation Security Guideline. Fort George G. Meade, 
MD. January 16, 1987. 

United States General Accounting Office. "Information Systems, 
Agencies Overlook Security Controls During Development. 
GAO/IMTEC— 88— US . May 1988. 

United States Department of Commerce. "Guidelines for Security 
of Computer Applications." FIPS PUB 73, June 30, 1980. 


contractor Reports 

Auty, David; Burns, Alan; McKay, Charles W. ; Randall, Charlie; 
and Rogers, Pat. "Portable Common Execution Environment 
(PCEE) Concept Document." NASA Johnson Space Center 
Contractor Report : Research Institute Isx Computing Mid 

information Systems . University gl Houston - CleS X Lax® 
Research Activity SE.16 . 24 January 1991. 


Kovach, R. D., R. Bolczak, and F. G. Tompkins. "A Model Set of 
Security Requirements for Procuring and Implementing 
Transaction Processing Systems." tfltrp Corporation 

Report MTR-84W131 . January 1985. 


25 





Tompkins, F. G. "NASA Guidelines for Assuring the Adequacy and 
Appropriateness of Security Safeguards in Sensitive 
Applications." NASA Contractor Report MTR-84W179 (The Mitre 
Corporation) September 1984 . 


Tompkins, F. G. "Guidelines for Developing NASA ADP Security 
Risk Management Plans . " NASA 
The Mitre Corporation) , Au 




Course . Computer Sciences Corporation for NASA Johnson 
Space Center 22-24 January 1990. 


Data Processing Installation Compute 







Tompkins, F. G. "NASA Guidelines for Assuring the Adequacy and 
Appropriateness of Security Safeguards in Sensitive 
Applications." NASA Contractor Report MTR-84W179 (The Mitre 
Corporation) September 1984. 

Tompkins, F. G. "Guidelines for Developing NASA ADP Security 

Risk Management Plans." NASA Contractor Report MTR-83W123 
(The Mitre Corporation) . August 1983. 


Sensitive Application Computer Security Officials Training 

Course . Computer Sciences Corporation for NASA Johnson 
Space Center 22-24 January 1990. 

Data Processing Installation Computer Security Officials Training 
Course . Computer Sciences Corporation for NASA Johnson 
Space Center, August 1989. 

Work Package 2 MDAC Team SISS Data Security and Privacy Working 
Group. SISS Data Security and Privacy Concept Definition 
Paper . Houston: Johnson Space Center, August 1988. 


7 . Unstructured citations on Malicious Software 

This list is provided to demonstrate the prolific commentary on 
malicious software that is occurring in the literature. The list 
includes citations from the businees, medical, armed forces, 
technical and popular literature. 

BOOKS 

Cohen, F. A Short Course on Computer Viruses. (Orig.). 07/1990. 
$48.00. (ISBN 1-878109-01-4). ASP. 

Ferreyra , Gonzalo. Virus en Las Coroputadoras. Tamayo, Jorge, 
editor. LC 90-47315. (Illus.). 136p. 08/1990. Paper. $9.90. (ISBN 
0-939573-45-8) . Macrobit Corporation. 

Haynes, Colin. Computer Virus Protection Handbook. 192p. 

(Orig.) . 06/1990. Paper. $24.95. (ISBN 0—89588—696—0) . Sybex, 
Incorporated . 

Hruska , Jan. Computer Viruses & Anti-Virus Warfare. 04/1990. 
Paperback text edition. $32.95. (ISBN 0-13-171067-2). Prentice 
Hall. 

Jacobson, Robert V. The PC Virus Control Handbook. (Illus.). 

89p. (Orig.). 05/1990. Paperback text edition. $39.95. (ISBN 
0-9627374-0-2) . International Security Technology, Incorporated. 



Levin, Richard. Computer Virus Handbook. 05/1990. Hardcover 
text edition. $24.95. (ISBN 0-07-881647-5). 
Osborne/McGraw-Hill . 


Ludwig, Mark. The Little Black Book of Computer Viruses, Vol. 1: 
Technical Aspects. 130p. (Orig.). 02/1991. Paper. $14.95. (ISBN 
0-929408-02-0) . American Eagle Publications, Incorporated. 

MASP Staff. Computer Viruses: Realities, Myths & Safeguards. 
(Ulus. ) . 200p. 01/1990. $59.00. (ISBN 0-940706-24-5). Management 
Advisory Publications. 

McAfee, John & Haynes, Colin. Computer Viruses, Worms, Data 
Diddlers, Killer Programs, & Other Threats to Your System: What 
They Are, How They Work, & How to Defend Your PC or Mainframe. 

2 4 Op . 08/1989. $24.95x. (ISBN 0-312-03064-9); Paper. $16.95. 

(ISBN 0-3 12-02889-X) . Saint Martin's Press, Incorporated. 

MAGAZINES. JOURNALS . AND CONFERENCES 


Title: Good Habits Key to Avoiding a Virus Attack 

Author: Buckler, Grant 

Journal: Computing Canada (Canada) Vol: 17 Iss: 8 Date: Apr 

11, 1991 


Title: Securing Your System from Hackers and Other Hazards 

Author: Simpson, Roy L. 

Journal: Nursing Mgmt Vol: 22 Iss: 3 Date: Mar 1991 pp: 

25-26 


Title: An ounce of prevention 

Author: Lefkon, Richard G. 

Journal: CIO Vol: 4 Iss: 5 Date: Feb 1991 pp: 20-21 


Title: Foreign Virus Strains Emerge as Latest Threat to U.S. 

PCs 

Author: Graggs, Tuseda A. 

Journal: InfoWorld Vol: 13 Iss: 5 Date: Feb 4, 1991 


Title: How to Stay Healthy 

Author: Corbitt, T. D. 

Journal: Credit Mgmt (UK) Date: Dec 1990 pp: 38 

Title: NetWare Virus Threat Disputed 

Author: Alexander, Michael 

Journal: Computerworld Vol: 24 Iss: 47 Date: Nov 19, 1990 

pp: 67 


27 



Title: 
Author: 
Journal : 


Title: 
Author: 
Journal : 


Title : 
Author: 
Journal : 


Title: 
Author : 
Journal : 


Title: 


Authors : 
Journal : 


Title: 
Authors : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 


Tools of the Trade: Utility Software Comes of Age 
McMullen, John 

Datamation (International Edition) Vol: 36 Iss: 21 
Date: Nov 1, 1990 pp: 53-54 

Practicing Safe HEX with C.D. Backslash 
Odens, Jerold G. 

Broker World Vol: 10 Iss: 9 Date: Sep 1990 pp: 

52-58, 156-164 

Open Systems Create Security Nightmare 
Daly, James 

Computerworld Vol: 24 Iss: 37 Date: Sep 10, 1990 

pp: 82 

Preventing the Dreaded "Call" to Virus Busters 
Alexander, Michael 

Computerworld Vol: 24 Iss: 37 Date: Sep 10, 1990 
pp: 49 

A File Integrity Checking System to Detect and Recover 
from Program Modification Attacks in Multi-User 
Computer Systems 

McKosky, Robert A.; Shiva, Sajjan G. 

Computers & Security (UK) Vol: 9 Iss: 5 Date: Aug 
1990 

The I PM Model of Computer Virus Management 
Jones, Scott K. ; White, Clinton E., Jr. 

Computers & Security (UK) Vol: 9 Iss: 5 Date: Aug 
1990 

The Numbers Game 
David, Jon 

Computers & Security (UK) Vol: 9 Iss: 5 Date: Aug 
1990 

Computer Viruses - 2 
Bacic, Eugen M. 

ComputerData (Canada) Vol: 15 Iss: 7 Date: Jul 1990 

pp: 10 

Networked Viruses Unmasked 
Nagy, Randall 

Network World Vol: 7 Iss: 31 Date: Jul 30, 1990 pp: 
32-34 

What You Don't Know About Computer Viruses Can Hurt You 
Smith, L. Murphy 

Financial & Accounting Systems Vol: 6 Iss: 2 Date: 
Summer 1990 


28 


Title: 
Authors : 
Journal : 


Title: 
Author ; 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Author: 
Journal : 


Title: 
Authors : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Authors : 
Journal : 


Title: 
Authors : 
Journal : 


Title: 

Author : 
Journal: 


Title: 
Author : 
Journal : 


Computer Viruses and the All Risk Policy 
Mezzacappa, John; Cooke, Karen M. 

Best's Review (Prop/Casualty) Vol: 91 Iss: 3 Date: 
Jul 1990 

New Technology 
Tyler, Geoff 

Management Services (UK) Vol: 34 Iss: 6 Date: Jun 
1990 pp: 22-24 

Viruses: A New Form of Crime 
Blanc, Gerard 

Computing Canada (Canada) Vol: 16 Iss: 12 Date: Jun 
7, 1990 

Disinfectants for Disk Drives 
Garfinkel, Simson L. 

Computerworld Vol: 24 Iss: 22 Date: May 28, 1990 
pp: 107 

Experts Eye Computer Virus Prevention 
Dauer , Christopher' ” ‘ ‘ _ 1” 

National Underwriter (Property/Casualty/Employee 
Benefits) Vol: 94 Iss: 18 Date: Apr 30, 1990 pp: 
10,75 

Computer Virus Prevention and Containment on Mainframes 
Al-Dossary, Ghannam M. 

Computers & Security (UK) Vol: 9 Iss: 2 Date: Apr 
1990 

Help Is Only a Keyboard Away 
Egol, Len 

Chemical Engineering Vol: 97 Iss: 4 Date: Apr 1990 
pp: 219-222 

Data Security: Fighting the Common Virus 
Chalmers, Leslie S. 

Jrnl of Accounting 4 EDP Vol: 6 Iss: 1 Date: Spring 
1990 

Computer Virus Recovery Planning - An Auditor's 
Concerns 

Joseph, Gilbert W. 

Jrnl of Accounting 4 EDP Vol: 6 Iss: 1 Date: Spring 
1990 

Computer Viruses and the Inland Marine Underwriter 
Crater, Alan K. 

CPCU Jrnl Vol: 43 Iss: 1 Date: Mar 1990 pp: 29-36 


29 


Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 


Title: 
Authors : 


Title: 
Author : 
Journal : 


Title: 
Authors : 
Journal : 

Title: 
Author : 
Journal : 


Title: 
Author : 
Journal : 

Title: 

Author : 
Journal : 

Title: 
Author : 
Journal : 


Title: 
Author : 


The Hygienic Auditor 
Spaul, Barry 

Accountancy (UK) Vol: 105 Iss: 1159 Date: Mar 1990 
pp: 140 

The Computer Virus Menace 
Jordahl, Gregory 

Insurance Review Vol: 51 Iss: 1 Date: Jan 1990 pp: 
41-44 

Datacrime Virus and New Anti-Virus Products 
Highland, Harold Joseph 

Computers & Security (UK) Vol: 8 Iss: 8 Date: Dec 

1989 

Worm Hits US DECnet Systems 

Adhikari, Richard; Anthes, Gary H. Journal: 

ComputerData (Canada) Vol: 14 Iss: 12 Date: Dec 1989 

Computer Virus Prevention and Detection Planning 
Joseph, Gilbert W. 

Jrnl of Accounting & EDP Vol: 5 Iss: 4 Date: Winter 

1990 pp: 4-8 

Knowbots 
Daviss, Bennett 

Discover Vol: 12 Iss: 4 Date: Apr 1991 pp: 21-23 

The Shockwave Rider 
Littman, Jonathan 

PC Computing Vol: 3 Iss: 6 Date: Jun 1990 pp: 
142-159 

Last Word: Death by Shakespeare 

Burns , Khephra 

Omni Vol: 13 Iss: 6 Date: Mar 1991 pp: 108 

'Killer' Computer Viruses: An Idea Whose Time 

Shouldn't Come 
Lewyn , Mark 

Business Week Iss: 3170 Date: Jul 23, 1990 pp: 30 

When a Virus Makes Your PC Sneeze 
Wiener, Daniel P. 

U.S. News & World Report Vol: 108 Iss: 8 Date: Feb 
26, 1990 pp: 62 

Computerviren. Vorbeugung und Bekaempfung. 
Computerviruses : prevention and detection. 

Hackenberg, Gerald Publication Year: 1990 


30 


Title: 

Author: 

Source: 


Title: 

Author : 
Journal : 


Title: 
Author : 
Journal : 


Title: 

Author: 
Source : 


Title: 
Author : 
Source: 


Title: 

Author : 
Source : 


Title: 

Author: 
Source : 


Software checksum. An inoculation against computer 
virus . 

Brown, Bradley J. 

Forty-Fourth Annual Quality Congress Transactions 
Conference Location: San Francisco, CA, USA Conference 
Date: 1990 May 14-16 Source: Annual Quality Congress 
Transactions v 44. Publ by ASQC, Milwaukee, WI, USA. p 
608-612 Publication Year: 1990 

Computer virus prevention and containment on 
mainframes . 

Al-Dossary, Ghannam M. 

Computers & Security v 9 n 2 Apr 1990 p 131-137 
Publication Year: 1990 

Friday the 13 th, facts and fancies. 

Herschberg, I. S . ; Paans, R. 

Computers & Security v 9 n 2 Apr 1990 p 125-130 
Publication Year: 1990 

ID-based authentication system for computer virus 
detection. 

Okamoto, E. ; Masumoto, H. 

Electronics Letters v 26 n 15 Jul 19 1990 p 1169-1170 
Publication Year: 1990 

Technology '90: Systems Software. 

Murphy, Erin E. ; Voelcker, John 

IEEE Spectrum v 27 n 1 Jan 1990 p 38-40 Publication 
Year: 1990 

Process execution controls as a mechanism to ensure 
consistency. 

Bacic, Eugen Mate 

Fifth Annual Computer Security Applications Conference 
Conference Location: Tucson, AZ, USA Conference Date: 
1989 Dec 4-8 Source: Fifth Annu Comput Secur Appl 
Conf. Publ by IEEE, IEEE Service Center, Piscataway, 

NJ, USA. Available from IEEE Service Cent (cat n 
89TH0287-3) , Piscataway, NJ, USA. p 114-120 
Publication Year: 1989 

Status and trends of the computer support for the 
public and private command and control centers. 

Hohne , Peter ' ^ 

Proceedings: 1989 International Carnahan Conference on 
Security Technology Conference Location: Zurich, 
Switzerland Conference Date: 1989 Oct 3-5 Source: Proc 
1989 Int Carnahan Conf Secur. Publ by IEEE, IEEE 
Service Center, Piscataway, NJ, USA. Available from 
IEEE Service Cent (cat n 89CH2774-8) , Piscataway, NJ, 
USA. p 271-275 Publication Year: 1989 

31 



Title: 

Author : 
Source : 


Title: 

Author : 
Source: 


Title: 

Author : 
Source : 


Title: 
Author : 
Source : 


Title: 

Author : 
Source : 


Overview of security technology efforts at Bell 
Communications Research. 

Schwartz, Barry K. 

Proceedings: 1989 International Carnahan Conference on 
Security Technology Conference Location: Zurich, 
Switzerland Conference Date: 1989 Oct 3-5 Source: Proc 
1989 Int Carnahan Conf Secur. Publ by IEEE, IEEE 
Service Center, Piscataway, NJ, USA. Available from 
IEEE Service Cent (cat n 89CH2774-8) , Piscataway, NJ, 
USA. p 79-81 Publication Year: 1989 

Computer virus prevention and containment on 
mainframes . 

Al-Dossary, Ghannam M. 

Proceedings: 1989 International Carnahan Conference on 
Security Technology Conference Location: Zurich, 
Switzerland Conference Date: 1989 Oct 3-5 Source: Proc 
1989 Int Carnahan Conf Secur. Publ by IEEE, IEEE 
Service Center, Piscataway, NJ, USA. Available from 
IEEE Service Cent (cat n 89CH2774-8) , Piscataway, NJ, 
USA. p 23-28 Publication Year: 1989 

Foiling the wily hacker: More than analysis and 
containment. 

Kluepfel, Henry M. 

Proceedings: 1989 International Carnahan Conference on 
Security Technology Conference Location: Zurich, 
Switzerland Conference Date: 1989 Oct 3-5 Source: Proc 
1989 Int Carnahan Conf Secur. Publ by IEEE, IEEE 
Service Center, Piscataway, NJ, USA. Available from 
IEEE Service Cent (cat n 89CH2774-8) , Piscataway, NJ, 
USA. p 15-21 Publication Year: 1989 

Computer virology and aids. 

Shaw, Dennis F. 

Proceedings: 1989 International Carnahan Conference on 
Security Technology Conference Location: Zurich, 
Switzerland Conference Date: 1989 Oct 3-5 Source: Proc 
1989 Int Carnahan Conf Secur. Publ by IEEE, IEEE 
Service Center, Piscataway, NJ, USA. Available from 
IEEE Service Cent (cat n 89CH2774-8), Piscataway, NJ, 
USA. p 11-14 Publication Year: 1989 

Developing secure software and security guidelines for 
IT systems. 

Stocker, Elmar, and Stobbe, Christine 
Siemens Review v 57 n 2 Mar-Apr 1990 p 28-33 
Publication Year: 1990 


32 



Title: 
Author : 
Source: 


Title: 
Author : 
Source: 


Title: 
Author : 
Source: 


Title: 
Author : 
Source: 


Title: 
Author : 
Source : 


Title: 
Authors : 

Notes: 


Title: 
Author : 
Source: 


Software vendors capitalize on security needs. 

Klopp, Charlotte 

Computers & Security v 9 n 1 Feb 1990 p 33-35 
Publication Year: 1990 

Computer viruses. Can they be prevented?. 

Zajac, Bernard P. Jr. 

Computers & Security v 9 n 1 Feb 1990 p 25-31 
Publication Year: 1990 Title: Safe computing. Author: 
Casavant, Thomas L. ; McMillin, Bruce M. Source: IEEE 
Potentials v 8 n 3 Oct 1989 p 29-31 Publication Year: 
1989 

Security on networks: Do we really need it?. 

Grimm, Ruediger 

Fifth RARE European Networkshop Conference Location: 
Trieste, Italy Conference Date: 1989 May 8-10 Source: 
Computer Networks and ISDN Systems v 17 n 4-5 Oct 10 
1989. p 315-323 Publication Year: 1989 

DIALOGLINK: more shortcuts and quick tips. 

Koga, James S. 

Online (Weston, Connecticut) v 13 n 4 Jul 1989 p 64-69 
Publication Year: 1989 Title: Preventing viruses in 
computer systems. Author: Wiseman, Simon Source: 
Computers & Security v 8 n 5 Aug 1989 p 427-432 
Publication Year: 1989 

Viruses: a management issue. 

DeMaio, Harry B. 

Computers & Security v 8 n 5 Aug 1989 p 381-388 
Publication Year: 1989 

Towards a testbed for malicious code detection 
Lo, R. ; Kerchen, P. ; Crawford, R. ; Ho, W. ; 

Crossley, J. 

COMPCON '91, San Francisco, CA (USA), 25 Feb - 1 Mar 
1991. Sponsored by^ Department of Energy, Washington, 

DC. Date: 1991 Pages: 19p NTIS Price Code: PC A03/MF 
A01 Document Type: Conference proceedings 

Behavior-Based Fault Monitoring; Final rept 
Shen, J. P. 

Carnegie-Mellon Univ. , Pittsburgh, PA. Dept, of 
Electrical and Computer Engineering. Date: 3 Dec 90 
Pages: 88p NTIS Price Code: PC A05/MF A01 


33 


Title: 

Author : 
Source : 


Title: 
Author : 


Title: 

Author : 
Source: 


Title: 

Author : 
Source: 


Title: 


Source : 


Title: 


Source : 


Network Stability under Viral Attack - A Game Entitled 
'God and the Devil'; Memorandum rept 
Giess, S. C. 

Royal Signals and Radar Establishment, Malvern 
(England) . Sponsoring Organization: Defence Research 
Information Centre, Orpington (England) . Date: Jul 90 
Pages: 23p NTIS Price Code: PC A03/MF A01 

Computer Virus Bibliography, 1988-1989 
Bologna, J. Notes: Available from ERIC Document 
Reproduction Service (Computer Microfilm International 
Corporation), 3900 Wheeler Ave., Alexandria, VA 
22304-5110. Date: 8 Dec 89 Pages: 14p NTIS Price 
Code: Not available NTIS 

Some Comments on Techniques for Resisting Computer 
Viruses; Technical rept 
Anderson, M. 

Electronics Research Lab., Adelaide (Australia). 
Sponsoring Organization: Department of Defence, 

Canberra (Australia). Date: Sep 89 Pages: 27p NTIS 
Price Code: PC A03/MF A01 

Computer Viruses. Legal and Policy Issues Facing 
Colleges and Universities 
Johnson, D. R. 

American Council on Education, Washington, DC. Notes: 
Available from ERIC Document Reproduction Service 
(Computer Microfilm International Corporation) , 3900 
Wheeler Ave., Alexandria, VA 22304-5110. Date: May 89 
Pages: 17p NTIS Price Code: Not available NTIS 

Computer Viruses and Computer Software Vaccines for 
Software Protection. November 1989-January 1990 (A 
Bibliography from The Computer Database) ; Rept. for Nov 
89-Jan 90 

National Technical Information Service, Springfield, 

VA. Date: Mar 90 Pages: 37p NTIS Price Code: PC 
N01/MF N01 

Computer Viruses and Computer Software Vaccines for 
Software Protection. January 1988-October 1989 (A 
Bibliography from The Computer Database) ; Rept. for Jan 
8 8 -Oct 89 

National Technical Information Service, Springfield, 

VA. Date: Mar 90 Pages: 12 3p NTIS Price Code: PC 
N01/MF N01 


34 



Distributed Debugger for Amoeba 
Elshoff, I. J. P. 

Mathematisch Centrum, Amsterdam (Netherlands) . 
Sponsoring Organization: National Aeronautics and Space 
Administration, Washington, DC. Notes: Presented at 
the ACM Workshop on Parallel and Distributed Debugging, 
Madison, Wi, 5-6 May 1988. Date: cJul 88 Pages: 15p 
NTIS Price Code: PC A03/MF A01 

Front-End Anti-Viral Detection Mechanisms Using 
Replicating/Self- Replicating Software; Rept. for 19 
Apr-19 Oct 89 

Sobczak, T. E. ; Trickey, R. W. 

Application Configured Computers, Inc., Baldwin, NY. 
Date: 19 Oct 89 Pages: 41p NTIS Price Code: PC A03/MF 
A01 


Computer Viruses and Related Threats: A Management 
Guide; Special pub. (Final) 

Wack, J. P. ; Carnahan, L. J 

National Inst, of Standards an d Techno logy (NCSL) , 
Gaithersburg, MD. Notes; Also available from Siipt. of 
Docs, as SN003-003-02955-6. ; Library of Congress 
catalog card no. 89-600750. Date: Aug 89 Pages: 46p 
NTIS Price Code: PC A03/MF A01 


ARTICLES WHICH HAVE APPEARED IN IHE MAGAZINES, JOURNALS. . . 


1. Elaborate tests for your system. (Diagsoft Inc. 's QAPlus 
4.52 utility software) (Peripherals) (column) .. . [The New 
York Times: June 25 1991] 

2. *News briefs, (software packages, product introductions and 
enhancements) [PC Week: June 17 1991] 

3. Prevention is key to averting the impending virus epidemic, 
(computer viruses) (Data Lines)... [Government Computer 
News: June 10 1991] 

4. *Windows virus program has sluggish symptoms. (Abacus Inc.'s 
Virus Secure 1.03 for Microsoft Windows)... [PC Week: June 
10 1991] 

5. Survey: drawing a bead on net managers' top concerns, 
(network management) (includes related article... [Network 
World: June 3 1991] 

6. *Common Cryptographic Architecture Cryptographic Application 
Programming Interface, (includes... [IBM Systems Journal: 
June 1991] 


Title: 
Author : 
Source : 


Title: 


Authors : 
Source: 


Title: 

Authors : 
Source : 


35 


7. * Democracy virus hits China PCs. [Newsbytes: May 30 1991] 

8. *NIST, computer industry work to prevent viruses. (National 
Institute of Standards and Technology) [Government Computer 
News: May 27 1991] 

9. Net managers focus on virus prevention, (computer viruses 
attacking networks) [Network World: May 27 1991] 

10. *Avoiding viruses and bugs in System 7. (Disinfectant 
virus-protection utility; need to upgrade utilities) 

[MacWEEK: May 21 1991] 

11. *Comdex: virus programs need benchmarks. (S&S 
International's Alan Solomon) [Newsbytes: May 21 1991] 

12. *Comdex: virus attacks increasing, says expert. (Command 
Software Systems' Dyan Dyer) [Newsbytes: May 21 1991] 

13. Securing the commercial arena, (computer security) [Computer 
Reseller News: May 20 1991] 

14. *Viral outbreak at British Telecom. (British 
Telecommunications Pic's computer virus) [Computergram 
International: May 14 1991] 

15. *Briefs. (graphics systems and security software) [PC 
Magazine: May 14 1991] 

16. Annoying virus lies low while preparing 'birthday' surprise. 
(Tech Talk) (the Joshi virus) (column) [InfoWorld: May 13 
1991] 

17. Viruses specially made to destroy nets, (network security) 
[Network World: May 13 1991] 

18. *SAM upgrade a shot in the arm. (Software Review) (Symantec 
Anti-Virus for Macintosh) (includes related summary... 
[MacWEEK: May 7 1991] 

19. Profiting from Mac viruses. (Apple Macintosh) [Computer 
Reseller News: May 6 1991] 

20. *Virus expert honored. (Council for Entrepreneurial 
Development presents special award to Virex developer... 
[Newsbytes: May 3 1991] 

21. Determining your information system's vulnerability to 
viruses. [Journal of Systems Management: May 1991] 

22. *Software updates. [LAN Technology: May 1991] 


36 


23 . 


Life in the anthropomorphic lane: of ants and viruses and 
robots on Mars, (robots and artificial life) (The. . . 
[Macworld: May 1991] 

24. *How to avoid the threat of virus-infected software. (Prime 
Time) [PC-Computing: May 1991] 

25. ‘HyperTalk: virus breeding ground? (viruses infecting 
HyperCard stacks) (StackWEEK) (column) [MacWEEK: April 30 
1991] 

26. *' Stoned' PC virus infects HUD systems. (Housing and Urban 
Development) [Government Computer News: April 29 1991] 

27. *IBM virus-busters take lead in preventing internal threats. 
[Government Computer News: April 29 1991] 

28. ‘Latest Mac viral infection hits the stacks: HyperCard 
affliction turns up in Europe, (includes related... 
[MacWEEK: April 16 1991] 

29. Association targets microcomputer security: group boasts 
increasing membership. (The National... [Computer Reseller 
News: April 15 1991]’ 

30. Virus breaks out on 3Com's campus net: prompt response lets 
vendor contain outbreak, purge infected... [Network World: 
April 15 1991] 

31. ‘Good habits key to avoiding a virus attack: regular backups 
a plus when protecting your PC... [Computing Canada: April 
11 1991] 

32. ‘Symantec releases new SAM version. (Symantec Anti-virus for 
Macintosh 3.0) (Micro Software) (product... [Computing 
Canada: April 11 1991] 

33. ‘New for PC: virus protection/computer security package. (PC 
Guardian's Virus Protection Plus)... [Newsbytes: April 10 
1991] 

34. ‘New Macintosh virus attacks HyperCard stacks. (Symantec 
Corp.'s Antivirus 3.0 gets enhancement) [Newsbytes: April 10 
1991] 

35. Data security pays premiums: insurance underwriters: now 
they help reseller sales. [Computer Reseller News: April 8 
1991] 

36. Military sees problems, promise in viral strikes. 

(computer viruses) [Computerworld: April 8 1991]’ 


57 


37. *Computer virus invades NIFTY-Serve network. [Newsbytes: 
April 8 1991] 

38. *Australian anti-virus company sets up in US. (Leprechaun 
Software) [Newsbytes: April 4 1991] 

39. *Microcom injects virus defenses into AppleShare nets. 
(Microcom Inc.'s Utilities Product Group releases the... 
[MacWEEK: April 2 1991] 

40. *Virex 3.1 fights viruses with the best of them. (Microcom 
Inc.'s Virex 3.1 computer virus protection — 

[MacWEEK: April 2 1991] 

41. * ' Evil Empire' virus turns up on Canadian campus [Newsbytes: 
April 2 1991] 

42. *New Virus Hunter package. (Defiant Systems | Virus Hunter 
version 3) (product announcement) [EXE: April 1991] 

43. *Germ warfare, (combatting computer viruses) (tutorial) [LAN 
Magazine: April 1991] 

44. *Resources. LAN Technology: April 1991] 

45. *Software update. (Forum) [PC Sources: April 1991] 

46. Symantec's SAM gets a face-lift: version 3.0 of anti-virus 
program for Macintosh ships. (Symantec... [Computer 
Reseller News: March 25 1991] 

47. The virus vaccine, (new and complex viruses surfacing daily, 
according to Certus International) [Information Week: March 
25 1991] 

48. *Scotland Yard tackles computer viruses. [Newsbytes: March 
21 1991] 

49. *New for Macintosh: SAM 3.0 anti-virus package. (Symantec 
Corp.'s Symantec Anti-Virus for Macintosh)... 

[Newsbytes: March 21 1991] 

50. Morris contemplates Supreme Court option. (Robert T. Morris, 
computer programmer on trial) [Computerworld: March 18 1991] 

51. Philips eyes anti-virus hardware. (Philips NV) [Information 
Week: March 18 1991] 

52. * "Hacker" debate heats virus conference. (4th Annual 
Computer Security and Virus Conference) [Newsbytes: March 
18 1991] 


38 


53 . 


♦Viruses described as artificial creatures. (Computer 
Security and Virus Conference) [Newsbytes: March 18 1991] 


54. *Virus conference proceedings available. (Computer Security 
and Virus Conference) [Newsbytes: March 18 1991] 

55. *Soviet virus trends. [Newsbytes: March 18 1991] 

56. *Kiev, Ukraine: fast HD virus scanner available, (hard disk) 
[Newsbytes: March 18 1991] 

57. *Symantec's SAM 3.0 simplifies Mac virus protection. 

(product announcement) [PC Week: March 18 1991] 

58. *Virus conference: Russia leading virus developer. (Computer 
Virus and Security Conference in New York City. . . 

[Newsbytes: March 15 1991] 

59. * Japanese Ministry announces anti-virus project. (Japanese 
Ministry of International Trade and Industry) (MITI) 
[Newsbytes: March 13 1991] 

60. *Security software. (Buyer's guide) (buyers guide) [PC User: 
March 13 1991] 

61. *SAM 3.0 features on-line updating. (Symantec Corp.'s 
Symantec Antivirus for Macintosh 3.0) (product... [MacWEEK: 
March 12 1991] 

62. *Hilgreave ships Hyperaccess/5 version 2.0. (communications 
software) (product announcement) [Newsbytes: March 12 1991] 

63. *Central Point releases virus protection program. (Central 
Point Software Inc.'s Central Point Anti-Virus) [Newsbytes: 
March 12 1991] 

64. *Japanese ministry launches anti-computer virus project. 
(Japan Ministry of International Trade and... [Newsbytes: 
March 12 1991] 

65. *virus protection: Central Point expands with new software. 
(Central Point Software. . . [EDGE: Work-Group Computing 
Report: March 11 1991] 

66. *Virus conference to be held in New York. (Virus and 
Security Conference, 1991) [Newsbytes: March 5 1991] 

67. *New Soviet virus in circulation. [Newsbytes: March 5 1991] 

68. *New products making debut at FOSE '91. (Federal Office 
Systems Expo) (product announcement) (Government Computer 
News: March 4 1991] 


39 


69. *Norton Antivirus tames 'Tigers' with a phone call. 

(Symantec Corp.'s data security software... [Government 
Computer News: March 4 1991] 

70. Portability of PC applications provides fertile soil for 
viruses. (computer viruses) [InfoWorld: March 4 1991] 

71. *Central Point program to fight 400 computer viruses. 
(Central Point Software Inc.'s Anti-Virus) (product... 

[PC Week: March 4 1991] 

72. *UK: IBM signs with S&S for virus toolkit. (S&S 
International) [Newsbytes: March 1 1991] 

73. *Newstrack. (current events in the computer industry) 
[Communications of the ACM: March 1991] 

74. Tools of the trade; assembling a toolbox of essential Mac 
utilities. [Macworld: March 1991] 

75. *Virex 3.1 raises defenses against mutants. (Microcom Inc.'s 
Virex 3.1) (product announcement) [ MacWEEK : Feb 26 1991] 

76. Rooting out viruses. (Personal Computers) (column [The New 
York Times: Feb 26 1991] 

77. A computer virus' goals: staying alive, making mischief, 
(design of virus programs) (Tech Talk) (column) 

[InfoWorld: Feb 25 1991] 

78. *Viruses and forged faxes now get insurance protection. 
(Lloyd's Insurance of London) [Newsbytes: Feb 25 1991] 

79. It's shareware, not virusware. (misconceptions about 
shareware) (Viewpoint) (column) [Computerworld: Feb 18 1991] 

80. Computer viruses follow clever paths to evade detection, 
(part 1) (Tech Talk) (column) [InfoWorld: Feb 18 1991] 

81. *Virus said to hit Duquesne University. [Newsbytes: Feb 18 
1991] 

82. *Parson's Technology upgrades Virucide. (Virucide 2.0) 
(product announcement) [Newsbytes: Feb 18 1991] 

83. *Australia: virus infection case dismissed by court. 
(Melbourne County Court reverses judgment against Deon 
Barylak) [Newsbytes: Feb 14 1991] 

84. *New for IBM: VirusCure Plus from IMSI. (International 
Microcomputer Software Inc. introduces new anti-virus. . . 
[Newsbytes: Feb 7 1991] 


40 



85. *NASA, police team up to nab Mac virus author. (National 
Aeronautics and Space... Government Computer News: Feb 4 
1991] 

86. *Least-privilege limits help squash DBMS worms. (Data Base 
Management System) (Spotlight on LAN. . . [Government Computer 
News: Feb 4 1991] 

87. Foreign virus strains emerge as latest threat to U.S. PCs. 
[InfoWorld: Feb 4 1991] 

88. *DOS-based package takes two-pronged approach to viruses. 
(System Peripherals Inc. introduces Thunderbyte. . . [PC 
Week: Feb 4 1991] 

89. *A Short Course on Computer Viruses. [EXE: Feb 1991] 

90. Rival 1.1.4; SAM (Symantec Antivirus for Macintosh) 2.0. 
(Software Review) (Symantech Corporation's SAM 2.0 and... 
[Macworld: Feb 1991] 

91. *The cradle of artificial life, (includes related article on 
creating your own artificial life) 

[PC-Computing: Feb 1991] 

92. Norton Antivirus: prevention proves much better than a cure. 
(Symantec Corp.) (Previews) [Which Computer?: Feb 1991] 

93. *Avoiding the virus crisis: don't let Trojan horses or logic 
bombs blow up your computer [WordPerfect Magazine: Feb 1991] 

94. *Computer Viruses. (Read Only) [PC User: Jan 30 1991] 

95. *New for Macintosh: upgrade to Virex 3.0. (Microcom Corp.'s 
data security software) (product announcement) [Newsbytes: 
Jan 23 1991] 

96. *New federal clearinghouse little help to Mac virus 
fighters. (National Institute of Standards and... 

[MacWEEK: Jan 22 1991] 

97. *Technology follows biology as computer viruses proliferate. 
(Looking Forward) (column) [PC Week: Jan 21 1991] 

98. *Antivirus package from Symantec. (Norton Antivirus) (New 
Products/Software) (product... [Computing Canada: Jan 17 
1991] 

99. *Two-prong attack method for virusbeater. (Virus Prevention 
Plus from PC Guardian Inc.) (New... [Computing Canada: Jan 
17 1991] 


41 


100. *Virex package gets booster shot: Microcoin's utility now 
configurable. (Virex 3.0 anti-virus software) (product... 
[MacWEEK: Jan 8 1991] 

101. *Vi-Spy chosen as anti-virus standard by U of PA. (RG 
Software Systems Inc.'s data security software) [Newsbytes: 
Jan 7 1991] 

102. *Norton Antivirus battles 142 threats with three methods. 
(Symantec Corp.'s computer virus protection software)... 

[PC Week: Jan 7 1991] 

103. * Antiviral utilities lack network punch; scanners, 
monitoring programs still comprise only one part of 
network... [PC Week: Jan 7 1991] 

104. *Certus International Corp.: Certus LAN 2.0. (Software 
Review) (one of five evaluations of data security 
software... [PC Week: Jan 7 1991] 

105. *Buyers seek simple but thorough antiviral programs, (data 
security software) [PC Week: Jan 7 1991] 

106. *Digital Dispatch Inc.: Data Physician 1.2c. (Software 
Review) (one of five evaluations of data security 
software... [PC Week: Jan 7 1991] 

107. *McAfee Associates: ViruScan 71, VShield 71, Clean-Up 71, 
NetScan. (Software Review) (one of five evaluations of... 
[PC Week: Jan 7 1991] 

108. *Microcom Inc.: Virex-PC 1.1A. (Software Review) (one of 
five evaluations of data security software... [PC Week: Jan 
7 1991] 

109. *RG Software Systems Inc.: Vi-Spy 4.0. (Software Review) 
(one of five evaluations of data security software... 

[PC Week: Jan 7 1991] 

110. *Downsizing doesn't mean the death of the mainframe. 
(Perspective) (column) [Computing Canada: Jan 3 1991] 

111. *NASA seeks prosecution of "Scores" creator. (National 
Aeronautics and Space Administration requests 
investigation... [Newsbytes: Jan l 1991] 

112. Security features of VMS and MVS with emphasis on their 
vulnerability to computer viruses. [Computer Security 
Journal: Wntr 1991] 

113. Revlon v. Logisticon: self-help or self-delusion? [IEEE 
Software: Jan 1991] 
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114. Users seek defenses against viral threat; protective 
packages seek to keep up. [PC World: Jan 1991] 

115. *Be smart: use Norton Antivirus to protect PCs against 
viruses. (Symantec's Norton Antivirus) (New! ).. . 
[PC-Computing: Jan 1991] 

116. *Computer security: National Research Council report 
encourages Congressional... [EDGE: Work-Group Computing 
Report: Dec 24 1990] 

117. *Officials seek help in tallying SCORES, (law enforcement 

agencies seek programmer suspected of writing SCORES... 
[MacWEEK: Dec 18 1990] .■ .... 

118. *SecureInit 2.3 security software gets screen locking, WDEF 
protection. (News Briefs) (WDEF virus)... [MacWEEK: Dec 18 
1990] 

119 . *Developers move on ZUC mutation. (ZUC B Macintosh virus) 
(product announcement) [MacWEEK: Dec 18 1990] 

120. *AntiToxin pack updated. (Mainstay introduces AntiToxin 1.4 
antivirus package) (product announcement) [MacWEEK: Dec 18 
1990] 

121. *UK: Symantec releases xmas anti-virus package. [Newsbytes: 
Dec 18 1990] 

122. Police set to nab virus author. (Dallas Police Department to 
file charges against alleged author of Scores) 

[Computerworld: Dec 17 1990] 

123. * Japan: formal research into virus protection. 
(Information-technology Promotion Agency) [Newsbytes: Dec 17 
1990] 

124. *Norton Antivirus utility wipes out PC , network bugs. 
(Symantec Corp. distributes MS-DOS utility program) 

(product., , [PC Week: Dec 17 1990] 

125. *News briefs, (new software releases) [PC Week: Dec 17 1990] 


126. * Rumor central. [PC Week: Dec 17 1990] 

127. Federal clearinghouse plans to track computer viruses; IBM, 
Lotus will help. (National Institute of... [The Wall Street 
Journal: Dec 17 1990] 

128. *Beijing virus pinpointed on hard disk at MIT. 
(Massachusetts Institute of Technology) [Newsbytes: Dec 13 
1990] 
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129. *Bulgarian antivirus software offered free, (from Computer 
for You magazine) [Newsbytes: Dec 13 1990] 

130. *New virus hits at MIT and in London at same time. 
(Massachusetts Institute of Technology) ('Beijing' virus) 
[Newsbytes: Dec 11 1990] 

131. *GCN reports nearly 5,000 U.S. Army PCs have a virus. 
(Government Computer News) (Operation Desert Shield) 
[Newsbytes: Dec 11 1990] 

132. U.S. systems open to threat, panel says. (National Research 
Council; includes related article on the... [Computerworld: 
Dec 10 1990] 

133. *5,000 Army PCs turn up viruses in last 90 days. (US Army 
concerned about infected computers in... [Government 
Computer News: Dec 10 1990] 

134. *Computer emergency team battles worm attacks: stopping WANK 
invasion helped gain funding... [Government Computer News: 
Dec 10 1990] 

135. Computer viruses make their way onto your LAN. (local area 
network) [LAN Times: Dec 10 1990] 

136. *Morris computer worm conviction appealed. (Robert Morris, 
Jr.) [Newsbytes: Dec 5 1990] 

137. *Virex update combats three new virus strains. (Microcom 
Inc.'s Virex data security software) [Newsbytes: Dec 4 1990] 

138. *Keep your data secure, (data security systems) (buyers 
guide) [Datamation: Dec 1 1990] 

139. *Newstrack. (computer industry events) [Communications of 
the ACM: Dec 1990] 

140. *New and renewed, (new products and updates) (What's Up) 
[PC-Computing: Dec 1990] 

141. * Japan offers tax breaks for virus protection. [Newsbytes: 
Nov 30 1990] 

142. *U.S.S.R.: virus crisis approaching, (computer viruses) 
[Newsbytes: Nov 29 1990] 

143. *New for IBM: VirusCure 1.4 removes 200 viruses, (product 
announcement) [Newsbytes: Nov 28 1990] 
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144. Is the cure worse than the disease?; Scientists mull over 
wisdom of siccing good viruses and worms on... 
[Computerworld: Nov 26 1990] 

145. *IBM keeps up with competition by achieving Bi for MVS/ESA. 
(MVS/ESA 3.1.3 mainframe gains... [Government Computer News: 
Nov 26 1990] 

146. *Gov't security in disarray, (computer systems in Canada) 
[Computing Canada: Nov 22 1990] 

147. *Gatekeeper Aid update fights latest virus strains. 

[MacWEEK: Nov 20 1990] 

148. Netware Virus threat disputed. [Computerworld: Nov 19 1990] 

149. The hidden persuader: a major lawsuit alerts MIS to the 
dangers of booby-trapped software, (includes... [Information 
Week: Nov 19 1990] 

150. An ounce of prevention fights computer viruses: protecting 
computers from electronic vandalism is vital... [LAN Times: 
Nov 19 1990] 

151. *Japan: tough new hacker law proposed. [Newsbytes: Nov 16 
1990] 

152. *A secure future for diskless workstations, (includes 
related article on three types of diskless devices) 
[Datamation: Nov 15 1990] 

153. *Sun's Newsprint: a new way to print. (Software Review) (Sun 
Microsystems Inc.) (evaluation) [Datamation: Nov 15 1990] 

154. *The case of missing files, (computer files) (editorial) 
[Computing Canada: Nov 8 1990] 

155. *Moving towards a virus-clean life for your computer. 
[Computing Canada: Nov 8 1990] 

156. *Whether virus or 'bacterium, ' they're not all malicious. 
[Computing Canada: Nov 8 1990] 

157. *MDEF C breakout reported, (virus in Apple Macintosh 
microcomputers) [MacWEEK: Nov 6 1990] 

158. CERTs unite to combat viruses, deter hackers. (Computer 
Emergency Response Team) [Computerworld: Nov 5 1990] 

159. *Fault-tolerant UNIX: Sequoia intros multi-level security. 
Developed with AT&T Bell Labs. (Sequoia... [EDGE, on & about 
AT&T: Nov 5 1990] 
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160. *Fault-tolerant Unix: Sequoia intros multi-level security. 
Developed with AT&T Bell Labs... [EDGE: Work-Group Computing 
Report: Nov 5 1990] 

161. Fed minis susceptible to viruses, expert says, 
(minicomputers) [Federal Computer Week: Nov 5 1990] 

162. *Utility software comes of age. (microcomputer systems 
management's growing need for utility programs) 

[Datamation: Nov 1 1990] 

163. * Loose LIPS sink ships, (logical inferences per second; 
expert system developers need to employ security techniques) 
[ AI Expert: Nov 1990] 

164. Stomping the nasties, (a guide top computer viruses) [Byte: 
Nov 1990] 

165. *Virus writers eat children - official, (computer 
viruses) (Norton Anti-Virus fails to cover 11 viruses) (News) 
[EXE: Nov 1990] 

166. *Dodging viruses and other data perils, (includes related 
articles on the federal computer security standard and... 
[Lotus: Nov 1990] 

167. *Desktop publishing, (a PostScript virus, Ventura Publisher 
for the Macintosh, the Macintosh prepress market and... 
[MacUser: Nov 1990] 

168. *Virex; systems/utilities. (Microcom Software Division's 
Virex antivirus software) (product... [Software Magazine: 
Nov 1990] 

169. *New for Macintosh: another virus to worry about - MDEF C. 
(Symantec Antivirus for the Macintosh) [Newsbytes: Oct 31 
1990] 

170. *Unix could be next target of growing virus invasion. 
[Government Computer News: Oct 29 1990] 

171. *Experts warn agencies to plan for security threats. 
[Government Computer News: Oct 29 1990] 

172. Revlon sues supplier over software disabling. (Revlon Inc. 
and Logisticon Inc.) [The New York Times: Oct 25 1990] 

173. *USSR: catalogue of antiviral programs available. 

[Newsbytes: Oct 25 1990] 

174. *Kiev: Antiviral conference announced. [Newsbytes: Oct 24 
1990] 
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175. *NIST proposes industry standard comments on virus 
consortium (National Institute of Standards and... 
[Newsbytes: Oct 23 1990] 

176. BrightWork's SiteLock monitors and protects LANs: This 
program successfully tracks usage, viruses, (local... [LAN 
Times: Oct 22 1990] 

177. *Japan: Hucom intros powerful network security system. 
[Newsbytes: Oct 22 1990] 

178. *Demax launches security policy guide for VAX/VMS users. 
(Demax Software) [Newsbytes: Oct 22 1990] 

179. *Hilgraeve readies DOS HyperAccess. (HyperAccess/5 for DOS 
communications software) (product announcement) [PC Week: 

Oct 22 1990] 

180. Insurance firms plan to scrap virus attack cover. [Computer 
Weekly: Oct 18 1990] 

181. *Network security is everyone's problem, (column) [Digital 
Review: Oct 15 1990] 

182. *Hunt for Hong Kong government virus source begins. 
[Newsbytes: Oct 12 1990] 

183. *Stoned virus infects official press hand-outs in Hongkong, 
(virus on floppy disk with political speech) [Newsbytes: Oct 
10 1990] 

184. *Consultant explains tracking down of virus author. (Mark H. 
Anbinder) [Newsbytes: Oct 10 1990] 

185. *And finally, (humor) (column) [PC User: Oct 10 1990] 


186. *New strain of ANTI infects apps, Finder. (Apple Macintosh 
microcomputer virus, ANTI B; applications)... [MacWEEK: Oct 
9 1990] 

187. *Moscow: ex-state enterprise offers top-rated security 
systems. (Scientific-Research Center for Computer... 
[Newsbytes: Oct 9 1990] 

188. *New for IBM: Bible databases, viruCide Upgrade from 
Parsons. (Parsons Technology's virus security and Bible — 
[Newsbytes: Oct 9 1990] 

189. Overcoming the plight of the power outage. (Lanscape) 
(column) [Computer Reseller News: Oct 8 1990] 
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190. NIST, industry team up for anti-virus consortium. (National 
Institute of Standards and Technology) [Federal Computer 
Week: Oct 8 1990] 

191. *Japan: IBM offering vaccine software. (IBM Japan) 

[Newsbytes: Oct 8 1990] 

192. *Teenager admits to writing and releasing viruses. 

(Macintosh viruses in upstate New York area) [Newsbytes: Oct 
8 1990] 

193. *LAN capability now vital backup issue, (backup software for 
local area networks) (buyers guide) [PC Week: Oct 8 1990] 

194. *LAN viruses are not running rampant says 900-Pro-Help. 
[Newsbytes: Oct 3 1990] 

195. *Teen-age virus writer cops plea, aids police, (author of 
CDEF, MCDF A and BDEF B viruses appearing on Macintoshes) 
[MacWEEK: Oct 2 1990] 

196. *Hidden horrors, (stealth viruses make their own code 
disappear from infected media) [EXE: Oct 1990] 

197. *Virus-detection program from John McAfee, (product 
announcement) [Lotus: Oct 1990] 

198. Verbatim; an interview with Gordon Eubanks, President of 
Symantec Corporation, (interview) 

[Macworld: Oct 1990] 

199. *The antivirus squad, (new data-security software) 

[PC -Computing: Oct 1990] 

200. *Symantec ' s SAM protects against virus. (Symantec Antivirus 
for Macintosh 2.0) (New Products)... [Computing Canada: Sept 
27 1990] 

201. *Viruses on Personal Computers, (video alerts users to risks 
of computer viruses) [PC User: Sept 26 1990] 

202. *Letters. (letter to the editor) [PC Magazine: Sept 25 1990] 

203. Symantec debuts Norton Antivirus software, (product 
announcement) [Computer Reseller News: Sept 24 1990] 

204. * ,l Frodo" virus supposedly set loose. [Newsbytes: Sept 24 
1990] 

205. *Combat Software releases Victor Charlie virus utility. 
(Australia) (product announcement) [Newsbytes: Sept 24 1990] 
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206. *Macintosh virus raises questions over foundation's chosen 
security software, (the Open... [Computergram International: 
Sept 21 1990] 

207. *New Product: HardDrive Overlord! for full-time virus 
protection. (POP Computer Products) (product announcement) 
[Newsbytes: Sept 20 1990] 

208. *Tokyograms. [Computergram International: Sept 18 1990] 

209. Novell's users to press needs. (NetWare Users International 
prepares report for Novell Inc.) [CommunicationsWeek: Sept 
17 1990] 

210. *4K virus threatens to do sinister deeds, (federal agencies 
preparing for the 4K computer virus... [Government Computer 
News: Sept 17 1990] 


211. *UK: S&S International releases "future proof" anti-virus 
kit. [Newsbytes: Sept 17 1990] 

212. *New version of Mac anti-viral Rival due. (Microseeds 
Publishing Inc.'s Rival 1.1.4 data security... 

[Newsbytes: Sept 14 1990] 

213. *New Macintosh viruses lead to new countermeasures. (Apple 
Macintosh microcomputers) [Newsbytes: Sept 13 1990] 

214. *Symantec ships virus blitzer. (Norton Anti-Virus) (product 
announcement) [PC User: Sept 12 1990] 

215. *Two more viruses surface in N.Y. [MacWEEK: Sept 11 1990] 

216. Preventing the dreaded 'call' to virus busters, (computer 
viruses) [Computerworld: Sept 10 1990] 

217. *Sept. 17 is designated User Education Day at FCC. (Federal 
Computer Conference) (includes... [Government Computer News: 
Sept 10 1990] 

218. *Developers fight to strengthen virus protection. (RG 
Software Systems Inc.'s Vi-Spy and Microcom Software... [PC 
Week: Sept 10 1990] 

219. *UK: Microcom bundles PC and Mac antivirus software. 
(Microcom Software) (Virex PC and Virex) 

[Newsbytes: Sept 7 1990] 

220. *Stoned virus source code published. [Newsbytes: Sept 7 
1990] 
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221. *PostScript trojan - wrong fax number in MacWorld. 
[Newsbytes: Sept 7 1990] 

222. Tolkien's hero turns villain as virus threatens IBM PCs. 
[Computer Weekly: Sept 6 1990] 

223. *At Dylex, bouncing ball syndrome turned into more than 
aberration, (a computer virus strikes) [Computing Canada: 
Sept 4 1990] 

224. IS security exec tells of risks, strategies, (information 
systems executive Sally Meglathery) (interview) [Network 
World: Sept 3 1990] 

225. *Attack of the killer virus. (Viewpoint) (editorial) [LAN 
Magazine: Sept 1990] 

226. *Jerusalem B. (how to avoid and recover from viruses) 
(Patches and Fixes) [LAN Magazine: Sept 1990] 

227. *The virus threat: viruses pose hidden danger to your 
network's integrity. (Security) (includes related... [LAN 
Magazine: Sept 1990] 

228. *Data storage on a local area network [Lotus: Sept 1990] 

229. *Rival . (Software Review) (Microseeds Publishing Rival 
anti-virus software for Macintosh) [MacUser: Sept 1990] 

230. *4K MS-DOS virus due September 22nd. ( how-to-preverit 

instructions) (tutorial) [Newsbytes: August 28 1990] 

231. Developers add security programs: data safety issues, 
(product announcement) [Computer Reseller News: August 27 
1990] 

232. *Japan: "universal” vaccine for Japanese MS-DOS computers, 
(from Ronrho International Networks) (product... [Newsbytes 
August 27 1990] 

233. Symantec offers anti-virus solution. (Symantec's 

Symantec/Norton Anti-virus software) (product... [Computer 

Weekly: August 23 1990] 

234. *New for IBM: latest Vi-Spy version scans disks 
automatically. (product announcement) [Newsbytes: August 
21 1990] 

235. Bozhe Moyl Hackers and viruses already plague Soviets. 
[Computerworld: August 20 1990] 
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236. *Singing the virus blues, (one user's experience with a 
computer virus) [Computing Canada: August 16 1990] 

237. *Buyer's guide: security software, (buyers guide) [PC user: 
August 15 1990] 

238. Data security: computer virus poses small risk. (Computers) 
[The Wall Street Journal: August 15 1990] 

239. *We only have to break some fingers, (reader questions, 
problems) (Help Desk) (column) [MacWEEK: August 14 1990] 

240. Virus bill raises hopes, fears: updated laws could hold 
unwitting transmitters liable for damages. . . 

[Computerworld: August 13 1990] 

241. The best defense against viruses may be sheer luck. 

(Viruses) (column) [Network World: August 13 1990] 

242. *Australia: first "computer trespass" conviction. 

[Newsbytes: August 13 1990] 

243. *UK: PC Today magazine has a near miss with virus. 
[Newsbytes: August 13 1990] 

244. *NIST expands security bulletin board. (National Institute 
of Standards and Technology expands its... [Newsbytes: 

August 13 1990] 

245. *Australia: government departments worry about PC viruses. 
[Newsbytes: August 8 1990] 

246. *Japan's police report computer virus influences. 

[Newsbytes: August 6 1990] 

247. *Public domain software versus shrink-wrapped box: in 
business world, proceed . . . but with caution. [Computing 
Canada: August 2 1990] 

248. Checklist for security checkup. [Canadian Datasystems: 
August 1990] 

249. *Newstrack. [Communications of the ACM: August 1990] 

250. *Sending a signal, (light sentencing of Internet worm author 
Robert Morris) (editorial) [Communications of the ACM: 

August 1990] 

251. *The Norton Utilities Version 5.0 takes a giant step 
forward, (product announcement) [Lotus: August 1990] 


51 


252. *SAM. (Software Review) (Symantec Antivirus for 
Macintosh) (Bobker's Dozen) [MacUser: August 1990] 

253. *PostScript virus on the loose. (Virus Alert) [MacWEEK: July 
31 1990] 

254. Vendors form virus prevention squads, (includes related 
articles on the insidious Stealth virus) [Network World: 

July 30 1990] 

255. Networked viruses unmasked. [Network World: July 30 1990] 

256. Keep an eye out for any unethical employee about, (computer 
crime) [Computer Weekly: July 26 1990] 

257. *Viruses spread in Japan, countermeasures planned. 
[Newsbytes: July 24 1990] 

258. *Newsbytes Index. (July 24, 1990) (highlights) [Newsbytes: 
July 24 1990] 

259. 'Killer' computer viruses: an idea whose time shouldn't 
come. (Commentary) (column) [Business Week: July 23 1990] 

260. Frodo Baggins: rising from the dead, (concerns about the 
4096 computer virus) [Computerworld: July 23 1990] 

261. Jerusalem virus variant plagues NetWare security. (Novell 
Inc. NetWare network operating system) [Network World: 
July 23 1990] 

262. * Letters . (letter to the editor) [Computing Canada: July 19 
1990] 

263. *New version of Vi-Spy introduced. (RG Software Systems 
Inc.'s Vi-Spy 3.0) (New Products - Micro... [Computing 
Canada: July 19 1990] 

264. *NEC details PC-9801 virus. [Newsbytes: July 17 1990] 

265. *China gears up for viral attacks on Friday 13th. 

[Newsbytes: July 17 1990] 

266. *Newsbytes index. (July 17, 1990) (highlights) [Newsbytes: 
July 17 1990] 

267. Bits & bytes. (Information Processing) [Business Week: July 
16 1990] 

268. Vi-Spy makes virus eradication easy. (RG Software* Systems ' 
virus detection and destruction. . . [Federal Computer Week: 
July 16 1990] 
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269. Curing the common virus. (Computer Associates International 
Inc) [Information Week: July 16 1990] 

270. Mainframe memory problems mount as computer viruses spread 
in Moscow. [The Wall Street Journal: July 13 1990] 

271. Destructive viruses have now spread to Japanese PCs. [The 
Wall Street Journal: July 13 1990] 

272. Steroids can harm your Mac's health. (Steroid shareware 
contains computer virus) [Computer Weekly: July 12 1990] 

273. There's a nasty bug going around, (includes a related 
article on virus attacks) (guide to how viruses work. . . 
[Computer Weekly: July 12 1990] 

274. *Disinfectant upgrade, INIT due this week. (Disinfectant 2.0 

anti-virus utility) (product announcement) [MacWEEK: 

July 10 1990] 

275. *Rival, SAM: two new virus fighters leading the pack. 
(Software Review) (Microseeds Publishing Inc. Rival... 
[MacWEEK: July 10 1990] 

276. *UK: Price Waterhouse issues warning on Friday 13th virus 
programs. [Newsbytes: July 10 1990] 

277. *Japan: Fujitsu customer support attacked by virus. (Fujitsu 
research center offers anti-virus program to... [Newsbytes: 
July 10 1990] 

278. U.S. pitches anti-virus venture, (cooperative effort between 
industry and federal government) [Computer Systems News: 

July 9 1990] 

279. *Army's $30M CHS so far unproven on battlefield. (Common 
Hardware/Software) [Government Computer News: July 9 1990] 

280. *Risk analysis, (panel discussion on security software and 
hardware) (PC Expo. . . [The Computer Conference Analysis 
Newsletter: July 6 1990] 

281. *Japan: most viruses hit Macintosh computer. [Newsbytes: 
July 3 1990] 

282. *Japan: Lonrho offers virus detector for PCs. (Lonrho 
international Networks) (product announcement) 

[Newsbytes: July 3 1990] 

283. Does taking the disk out mean taking the risk out? 

(Security) [Telecommuting Review: the Gordon Report:' July 1 
1990] 
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*Open letter: why Apple needs to license the Macintosh, why 
viruses delay it... [Multimedia Computing & Presentations: 
Feb 20 1990] 

*LAN security: overhead or time bomb? (industry trend) 

[Tech Street Journal: May 1989] 
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